2a5ac1a06355deddff5aabb1c4df01a9_JaffaCakes118 | Triage

Sharing

General

Target

2a5ac1a06355deddff5aabb1c4df01a9_JaffaCakes118
Size

9KB
MD5

2a5ac1a06355deddff5aabb1c4df01a9
SHA1

ca89c8f0186b7867f408e7186b4ad549e6f5f917
SHA256

ad5113abbaff1e8ef676a829f41b2a596df8c3f4c2f4750b9d9a84d187dd866b
SHA512

3150d8c7bcbd5cd4395b51074f0cff021e00f922727813a31ab0a30078825f7b421a8ee68017d51470ebe26c5f63466f4c075694cb6577bfba729f6de1f50003
SSDEEP

192:bFzQrmhyOclJeB7MW3Bc9lJWn8I8BSaW:FBhyLzeB7MT9DWn8I8BBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a5ac1a06355deddff5aabb1c4df01a9_JaffaCakes118

Files

2a5ac1a06355deddff5aabb1c4df01a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

380262a44007b88c6a624383ddf6faba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

kernel32

lstrlenA
GlobalAlloc
CloseHandle
CreateFileA
CreateFileMappingA
GetCurrentProcess
GetFileSize
GetLastError
GlobalFree
lstrcpyA
WriteFile
UnmapViewOfFile
ReadFile
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GetProcAddress

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

advapi32

RegOpenKeyA
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegDeleteValueA
RegCloseKey
OpenProcessToken

shlwapi

StrStrIA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE