19058169241c254d959645d17ce9f829_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19058169241c254d959645d17ce9f829_JaffaCakes118
Size

35KB
MD5

19058169241c254d959645d17ce9f829
SHA1

91b3bb1fe9f332d8da49f97601fa5d805fa0583f
SHA256

d601a425a962c188a51c8457d57c6c5db74b5498cedd70bfcf1f610de6949a05
SHA512

46616677d54d8fe9288ad383204edca2c342f9e5cac094a9706a927faead39a83a84251feab627955d3be66080913bf54f5d78f6e8e617c285a3a00df5d926a2
SSDEEP

768:o3cigPdoQL9EcDZr0bE9LyZGcem12NEfhgUpjQRH38tuLMMg+uvPS7s:ImL6cDZQbE1bc/zfhcRX8tuIz+uig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19058169241c254d959645d17ce9f829_JaffaCakes118

Files

19058169241c254d959645d17ce9f829_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0f784aa776e9e4d048784471313a0a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
VirtualProtect
SizeofResource
LockResource
LoadResource
lstrcatA
GetLastError
CreateProcessA
GetCommandLineA
GetEnvironmentVariableA
CreateFileA
WriteFile
CloseHandle
lstrcpyA
lstrlenA
DeleteFileA
FindResourceA
GetCurrentDirectoryA

advapi32

CheckTokenMembership
FreeSid
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
AllocateAndInitializeSid

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ