69b28c3d8e776b06ead342eb0c713f3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69b28c3d8e776b06ead342eb0c713f3f_JaffaCakes118
Size

9KB
MD5

69b28c3d8e776b06ead342eb0c713f3f
SHA1

1466019b15c8c8abc25f10ef92395debc7860124
SHA256

af6e0d45c4a4ab3db0bc79b41d6dd9c135827aea7d97c9d26b2a476226616296
SHA512

22bb39a1e26f0116b724fbd23138cd47463a541dbf3c2ac09626b5119b4174b9e6ac30657ffc3decaf898b89b148de1039ab47031cc4d1a5d48242b5f8362dca
SSDEEP

192:uqr8uDoXISkYaHuH6ZektdW3Bc9YnJWn8I8BSaW:uqr8uDoXISkY6ZektdT9eWn8I8BBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69b28c3d8e776b06ead342eb0c713f3f_JaffaCakes118

Files

69b28c3d8e776b06ead342eb0c713f3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93b5029f33eab48d822b686f7ed72fd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

kernel32

WriteFile
GetModuleFileNameA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
GetCurrentProcess
GetFileSize
lstrlenA
lstrcpyA
lstrcatA
GetProcAddress
UnmapViewOfFile
Sleep
SetFilePointer
ReadFile
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryA
GlobalFree
GlobalAlloc
GetLastError

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector

advapi32

RegOpenKeyA
LookupPrivilegeValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegEnumValueA
RegCloseKey
OpenProcessToken

shlwapi

StrStrIA

wsock32

send
recv
WSAStartup

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE