2bfe1a5e1c5f580e4bd517585bf91ada_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bfe1a5e1c5f580e4bd517585bf91ada_JaffaCakes118
Size

9KB
MD5

2bfe1a5e1c5f580e4bd517585bf91ada
SHA1

5570d22af2d40ff73933a88edb6f2bdc57a4e186
SHA256

af8004dc7f51552d986d5a48b7b2d30d285a67a723c3745e997c7b469a1f0ef3
SHA512

7dc5c70669704413d67e2963283dcc1eca09080e5adb8db3c332798fa73342da27318b89f0a6def3b4e0146cb780b1f2d17adf3290679976313f0854f1b2e029
SSDEEP

192:4VN+B3rbSRLkdaDlMF5hsKq2RRSswZBpdI3Bc97zJWn8I8BSaW:4VN+B3rbeVqRSswZBpd59JWn8I8BBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bfe1a5e1c5f580e4bd517585bf91ada_JaffaCakes118

Files

2bfe1a5e1c5f580e4bd517585bf91ada_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba3b22661fce97af7292b7536551bcfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

kernel32

lstrcpyA
GetProcAddress
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
GetCurrentProcess
GetFileSize
lstrlenA
GlobalAlloc
lstrcatA
WriteFile
UnmapViewOfFile
ReadFile
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalFree
GetLastError

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

advapi32

RegOpenKeyA
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegCloseKey
OpenProcessToken

shlwapi

StrStrIA

wsock32

send
recv

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE