38cf37559c211e00954a46a4ae946002_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38cf37559c211e00954a46a4ae946002_JaffaCakes118
Size

9KB
MD5

38cf37559c211e00954a46a4ae946002
SHA1

2841f84c80d572a9b0b44df58f8d3d6df90df1fd
SHA256

acb09cb06cad0e504ca71875611a304361f574aeb045b2810bdc5adf6294fcfc
SHA512

1d4bb3b2acb2897fb4b59817ea2c4095456fb2993245c096c5e87a6613a3b56481fdc1959fed798b0b34584329fb4497571306a4be00e4de400d614bf6a7b6ac
SSDEEP

96:J1zVB1UVTpZqbHTOchRGr7BwIm3HzKPP9wbHicTj0DLx5knJQhaeDGwJKA:foTTuHKchO9pFwbHicTj2QJIxGwJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38cf37559c211e00954a46a4ae946002_JaffaCakes118

Files

38cf37559c211e00954a46a4ae946002_JaffaCakes118
.exe windows:1 windows x86 arch:x86

417ebe1cefbf4946e3e1c7def175504c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx
GetMessageA

kernel32

CloseHandle
CreateFileA
CreateThread
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalLock
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE