327541da255734ba4763a03e20d09ea1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

327541da255734ba4763a03e20d09ea1_JaffaCakes118
Size

95KB
MD5

327541da255734ba4763a03e20d09ea1
SHA1

4d573b2ae567888ea4897d047372d96c7c9d8f60
SHA256

6c3fd6a654ae845a86dc3022b48af3b6df1d5f7d15a57f2e61047b7fb9f1ee9e
SHA512

c6c79a789c448282ae01e5255a806d30b258b09e7b854135d82ca22f4df8a01fd11c33b528b236bbe2e186d27cb087f6eb08f7d35b27942966f1ab5ac6013943
SSDEEP

768:uOiEjmECGNck7CH6tKv5vbbdzzsLXw9KpA3HF1t:uXHyN5KvJbL/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
327541da255734ba4763a03e20d09ea1_JaffaCakes118

Files

327541da255734ba4763a03e20d09ea1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

29cb3182df4746c09a89ced76a3b1c2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx
MessageBoxA

kernel32

CloseHandle
CreateFileA
CreateThread
DeleteFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 1005B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE