b5a4d88a0505febafbbe489b41825046_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5a4d88a0505febafbbe489b41825046_JaffaCakes118
Size

4KB
MD5

b5a4d88a0505febafbbe489b41825046
SHA1

07917cea1cd5d349ba666e6e1f4c0c8b0f52e60c
SHA256

5f1abceb8284d46ff70a4d8e29b8b4f93fd8b55ef0187e78d3eb6ce530c36b5e
SHA512

bc6c6e9eaa117053d9cb44a48042729bd78f320af9ee494625d2b64b4cce95dfcae99f0b5dcdfa56558830c3196d2d1d84ff40034390edb5743af09afe051b14
SSDEEP

48:ZvtXp27Lce8LWwDL/x/gjYgvBp4+lJlRJF2dhNAMoBAAP:Z1IZ8LWwDOYMBp4+lJ7D2hcKA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5a4d88a0505febafbbe489b41825046_JaffaCakes118

Files

b5a4d88a0505febafbbe489b41825046_JaffaCakes118
.exe windows:1 windows x86 arch:x86

aa57ab958c5dfd47adbac79d9c490f1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 933B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE