9719efcdc85573c9ce203208775ae167_JaffaCakes118 | Triage

Sharing

General

Target

9719efcdc85573c9ce203208775ae167_JaffaCakes118
Size

20KB
MD5

9719efcdc85573c9ce203208775ae167
SHA1

bb882446e8f29985660ab8896cfbba53205a3175
SHA256

167fb186ef083d0918372478409071de5cb06f8181b7fff53342081212e87f8a
SHA512

0aa8ba9719838f989f71577125a615cf2d4c9be49d5a3fa27101eb74015a9a8d58fe1c1c1f8234dfd169efcd5721bfa1d850c97f260221a28e3a380b5d0e03da
SSDEEP

384:NL+sxSfposMIZ4C8v/taIQQAOzol5lt3cDNQN:cQSqGkv/dQQDott3cDNQN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9719efcdc85573c9ce203208775ae167_JaffaCakes118

Files

9719efcdc85573c9ce203208775ae167_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de8752602e23ccba97c472b5f4e06f64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegSetValueExA
AdjustTokenPrivileges

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
FindResourceA
GetEnvironmentVariableA
GetFileSize
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetTickCount
LocalAlloc
LocalFree
MoveFileA
MoveFileExA
OpenMutexA
ReadFile
SetCurrentDirectoryA
SetFilePointer
Sleep
TerminateProcess
WinExec
WriteFile
lstrcatA

user32

EnumWindows
ExitWindowsEx
GetDlgItem
GetWindowTextA
PostMessageA
wsprintfA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE