3db56516243df23433fd417d4121c772_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3db56516243df23433fd417d4121c772_JaffaCakes118
Size

6KB
MD5

3db56516243df23433fd417d4121c772
SHA1

614dcf2d772e3dbc5123ec4c8f00a54193a55448
SHA256

9a29b25ace57853592308973ef3822bc76da17f81e8522bc73f57f6c3c128e53
SHA512

53787e8a2f55b02d34af65e897f1fb5486927edc8b9343e29986f0d14a93edfc37e2e6deebf63593ed7bb68be81af0bd398b8cc21b5611dfcf8e10499ff7f627
SSDEEP

96:SbI6Dyi9Y4BIIkfqTYG+n3Bc9VnL9Wn8I8BSaWwG:S86T9Y4BIMW3Bc9lJWn8I8BSaW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db56516243df23433fd417d4121c772_JaffaCakes118

Files

3db56516243df23433fd417d4121c772_JaffaCakes118
.exe windows:4 windows x86 arch:x86

952da63fa252118efe20251cc0215b59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
CloseHandle
GlobalFree
LoadLibraryA
lstrcpyA
lstrlenA
GetLastError
GetProcAddress
GlobalAlloc

oleaut32

SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayAccessData

advapi32

AdjustTokenPrivileges
OpenProcessToken
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey
LookupPrivilegeValueA

shlwapi

StrStrIA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE