85cba67f52c21578fc013c5dc2020aff_JaffaCakes118 | Triage

Sharing

General

Target

85cba67f52c21578fc013c5dc2020aff_JaffaCakes118
Size

10KB
MD5

85cba67f52c21578fc013c5dc2020aff
SHA1

fcc195dff33807c4e11066d5a52029c82ad82426
SHA256

b6f1c59482bfef35c59dd51e079b74fdd2f35a25dec1a180f656a0018a7290c4
SHA512

8442e24b6feef209e90596e0dfa3bbf2fd054d5bc8211c01dd3ef8f72ee3e5a983149eafda05dfa2109bb59d955ef2474bee15e95fbc2ac4798a734d3a8fa61a
SSDEEP

96:4yxvzsRAHNym+QkxDxSyTDemmGTXe/pK05sSwvjmvUuNucMKIE8:DxvIRQN1+Qk55aMrVPrx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85cba67f52c21578fc013c5dc2020aff_JaffaCakes118

Files

85cba67f52c21578fc013c5dc2020aff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d6071fb8b0f46ba160b83cecd80fc6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
DeleteFileA
FindResourceA
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
LocalAlloc
LocalFree
MoveFileA
MoveFileExA
OpenMutexA
ReadFile
SetCurrentDirectoryA
SetFilePointer
Sleep
TerminateProcess
WinExec
WriteFile
lstrcatA

user32

ExitWindowsEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE