4aa1a25bb688829fa75793251a6893f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aa1a25bb688829fa75793251a6893f7_JaffaCakes118
Size

68KB
MD5

4aa1a25bb688829fa75793251a6893f7
SHA1

cae97e040c2007c998a446f6a9b158782c39ea0b
SHA256

1f092f11a6346002a349781810de8ac26582d27b36cc0a7ac5f96f8273d613dd
SHA512

5c3ae636d1d4ea19c5c50c723bff4484e7f479cdd075cc6942ce19842224377b3a719c3ac3e6984e49190d3a4c5831d6a6e09eea488bc6951a2b950197da1493
SSDEEP

768:87fWdh57tCwZokiw3wz9ll/Uq/6flr5udMEH/XBrIvkfv6HHR+:8idjZokB3wzDtUq/6N4HH/XFIQv6HH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aa1a25bb688829fa75793251a6893f7_JaffaCakes118

Files

4aa1a25bb688829fa75793251a6893f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8ef03178a8859472829d84e065255fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
CloseHandle
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
SizeofResource
FreeResource
GetModuleHandleA
DeleteFileA
GetModuleFileNameA
SetSystemTime
GetSystemTime
GetCurrentProcess
GetProcAddress
GetSystemInfo
GetLastError
LoadLibraryA
LockResource
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ