2edb203d26179713743189ecbd39b47f_JaffaCakes118 | Triage

Sharing

General

Target

2edb203d26179713743189ecbd39b47f_JaffaCakes118
Size

855KB
MD5

2edb203d26179713743189ecbd39b47f
SHA1

e3b2841c4053e62bdea7c328083798914b3763c2
SHA256

35948d8cfc2261525fae0fac945c0419715754237cbb6bb48a5c8520f8682d16
SHA512

4bc60011e9769aa44a7e977b355ae8a81a8cd3ffdb43adeab3b13052db5269f30b8533d54409a7acd8db18a98ef198c938f4e0cc6a7199f4220f304a83bbdabe
SSDEEP

12288:bh0Th3egu3cI11Df+j+VmZPUTwJXzpykD3GvTembjerhhmPOIvLxMQ2pcSj3K:bGu3cu55sPUTUXkYGvTe8erhUPLJ4h3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2edb203d26179713743189ecbd39b47f_JaffaCakes118

Files

2edb203d26179713743189ecbd39b47f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9a832c95b599480e17d7b38c47012b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
LockResource
LoadResource
SizeofResource
GetProcAddress
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA
GetCurrentProcess
CloseHandle
FindResourceA
CreateFileA

user32

MessageBoxA

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

msvcrt

__getmainargs
strcat
memset
malloc
strlen
_except_handler3
_exit
_XcptFilter
exit
_acmdln
printf
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ