0c77f66e82bc92a5e29939613b5c9b7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c77f66e82bc92a5e29939613b5c9b7d_JaffaCakes118
Size

12KB
MD5

0c77f66e82bc92a5e29939613b5c9b7d
SHA1

ad5aec61e583244bac6659cd9f6bcd4e41a5a8c4
SHA256

5fcedc6cd9c1589999a4684d02d491da31ea6aff1aed4d70fe1b0f33dd9ef73f
SHA512

c42d71502428fda0d11f93535144a914cc52cee0c58b437195af5b85a791670c9deafa2740cb4e6015467db01f9846d4715a5c4b327cca63b9274047deab03b8
SSDEEP

192:CmkRYki5yTdZnDKjwjhj4WMouJRKPJTiR+iykx2PbEV:dkS5yZNDKj1WMo+KPJ9Dm2Tu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c77f66e82bc92a5e29939613b5c9b7d_JaffaCakes118

Files

0c77f66e82bc92a5e29939613b5c9b7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a824f9b5670f930b0da66723e7b3827d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetProcAddress
ExitProcess
GetSystemTime
GetTickCount
lstrlenA
GetCurrentProcess
LoadLibraryA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DexCrypt
Size: 60B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ