5d22071887ff280b99568301a7b49fc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d22071887ff280b99568301a7b49fc8_JaffaCakes118
Size

60KB
MD5

5d22071887ff280b99568301a7b49fc8
SHA1

11d94b4ab824f0e47ca154234a5bb9f278ae7ca5
SHA256

be053cef5496cb5cf3d3ca89d3b5e1d3a646aa079571a7da97e4705c03985c1f
SHA512

bf981392229c416502d89f5614627fda00e71d27ae2cf5b1e8c542616bbf0b15c1caf26a2c2ecedfc04db6ecd6f45516fb2294a3fc6546b7e8dc54986c7ef5d1
SSDEEP

384:l4xCqo2A80282pGA1FnTuM+7J7iZ702oCvRNljS4z/PNDP0wPox6mOMBgFmu+/wM:lDqo2v072Y65Lg0PXPl1P2VgFmlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d22071887ff280b99568301a7b49fc8_JaffaCakes118

Files

5d22071887ff280b99568301a7b49fc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

483b2f5b6a69b07f8e95543cfb727fd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
CloseHandle
GetModuleHandleA
DeleteFileA
SetFileAttributesA
GetCurrentProcess
GetSystemInfo
GetLastError
LoadLibraryA
GetProcAddress
SizeofResource
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ