83710847063c62bbd39ab0353e4ebefa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83710847063c62bbd39ab0353e4ebefa_JaffaCakes118
Size

4KB
MD5

83710847063c62bbd39ab0353e4ebefa
SHA1

caa273ba5ceaedef39ca9be9c29116a735652b09
SHA256

d5c6cf1fda7fd581e1457221533046a357f8a402861db491abaabde3eb8db2ca
SHA512

dde74430fc03320cca3817e9ac8ccc216b8d470ffffbea6f1b3854369062f95bdfde12fbfd1bdcf6527392206002cb84598d5ef26659399cd05d7ea7f947451c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83710847063c62bbd39ab0353e4ebefa_JaffaCakes118

Files

83710847063c62bbd39ab0353e4ebefa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ef2393deba6f099fbf0becbe9d9e275

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx
OpenProcess
Process32Next
Process32First
GetProcAddress
WriteProcessMemory
GetCurrentProcess
CreateToolhelp32Snapshot
CloseHandle
GetStartupInfoA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_strcmpi

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE