1a760f41062eeb530d570e7e2df7cac8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a760f41062eeb530d570e7e2df7cac8_JaffaCakes118
Size

9KB
MD5

1a760f41062eeb530d570e7e2df7cac8
SHA1

3fb997ce5f62326c9b8a0cd553d9770ce5626328
SHA256

e7c75b5415e028b7333d06ef186d69b2ff1984bea75d24e4f60ce0e9e2937840
SHA512

aa976f337c0042505559444b2f9769eec00a393b16da995b6e45ee9f9c9b79aee2bf6139fed278216925e6df78e34f84c2d4e8d3d5b5166ae6766926a1b873ac
SSDEEP

192:a3qT9qRLkdaDlMF5hs2q2RRzWIGZekAtI3Bc97zJWn8I8BSaW:a3qT9WJqRzwZekAt59JWn8I8BBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a760f41062eeb530d570e7e2df7cac8_JaffaCakes118

Files

1a760f41062eeb530d570e7e2df7cac8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6ad14ad3620d13b3b8836ffdf031b9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

kernel32

lstrcatA
GetModuleFileNameA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
GetCurrentProcess
GetFileSize
lstrlenA
lstrcpyA
GetProcAddress
WriteFile
UnmapViewOfFile
Sleep
ReadFile
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalFree
GlobalAlloc
GetLastError

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

advapi32

RegOpenKeyA
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegCloseKey
OpenProcessToken

shlwapi

StrStrIA

wsock32

send
recv
WSAStartup

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE