a545ff57da1a4b551f23ad0099e6b56e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a545ff57da1a4b551f23ad0099e6b56e_JaffaCakes118
Size

9KB
MD5

a545ff57da1a4b551f23ad0099e6b56e
SHA1

6ad30a3422547b8d356d231cca78d89e25d0d1b6
SHA256

f36d3610feb457c4bf989d3107403f06ea2827f47013d82bfc292b2b9dde3e9d
SHA512

cc1d0c3624ed791c19969fb8c407f90881b55fd9dac2a7350a2a4e60df38eac8e7115d7f18551cd0f1f23e3134803289da305c431c6d63666468dc82a6a45adf
SSDEEP

192:Wj6VfCyMGF2Klfx1ZEoAP1Y68YIulNTTxkJ2wRFcm/v:WWAyMtKmb8RFcWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a545ff57da1a4b551f23ad0099e6b56e_JaffaCakes118

Files

a545ff57da1a4b551f23ad0099e6b56e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ff89c41880bfde463a1724ccd2a79ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrcatA
GetCurrentProcess
SetEvent
GetModuleHandleW
GetProcAddress
CloseHandle
ExitProcess
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualAlloc
HeapReAlloc

user32

ExitWindowsEx
MessageBoxA

advapi32

RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE