5d8f6ba4f754d3d1fe81bd02415bdb80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d8f6ba4f754d3d1fe81bd02415bdb80_JaffaCakes118
Size

9KB
MD5

5d8f6ba4f754d3d1fe81bd02415bdb80
SHA1

7aa3c2818ea80cdbe7e7d44c7d6445a1b7c3d4e6
SHA256

682466a18bce1bd34f375c602c6c0f960b92089dda26d1dfc4a68dd45c03611c
SHA512

38da43e3283bbb9c4324c5fdfe90cdef3e7dc8f1d6fea55291775f10f4393094fcf03ce6974c91855d2f763592c924b3cd567894ddc95f48c8d23a3aa17bfff3
SSDEEP

192:0kW7ERtswlIGZekAxd9I3Bc9YHJWn8I8BSaW:o7E3swtZekAxz59OWn8I8BBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d8f6ba4f754d3d1fe81bd02415bdb80_JaffaCakes118

Files

5d8f6ba4f754d3d1fe81bd02415bdb80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6ad14ad3620d13b3b8836ffdf031b9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

kernel32

lstrcatA
GetModuleFileNameA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
GetCurrentProcess
GetFileSize
lstrlenA
lstrcpyA
GetProcAddress
WriteFile
UnmapViewOfFile
Sleep
ReadFile
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalFree
GlobalAlloc
GetLastError

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

advapi32

RegOpenKeyA
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegCloseKey
OpenProcessToken

shlwapi

StrStrIA

wsock32

send
recv
WSAStartup

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE