2cc9407fd4dfb4814761d820340ef878_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cc9407fd4dfb4814761d820340ef878_JaffaCakes118
Size

20KB
MD5

2cc9407fd4dfb4814761d820340ef878
SHA1

399fb7f565aa3c3423391e094af50bcd3a9702e2
SHA256

98fcd4ae14c6676ae60aac572b0badb3c617ee7d91eadbfb4be97dbe0fdfa75c
SHA512

2d9e5f6b69f6cfb0f63edfa22438a8aace1124de18150fcce12a2d306304a2ab44c58fdedd15df5344e872fb38cf74d98eb417cac2fd47337dc0b27930d4a23e
SSDEEP

384:daLDLGXrKzpllHiFEh801dvGp/SnjYCfn+oI/FDfXZzoHWaT:ALp1PiF3p4jrnYftRaT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cc9407fd4dfb4814761d820340ef878_JaffaCakes118

Files

2cc9407fd4dfb4814761d820340ef878_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff3357c629adaa00f6f0d86be23f113e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle

user32

CharLowerA

advapi32

OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE