b850cebde6538bf5b1bdf510429a51f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b850cebde6538bf5b1bdf510429a51f5_JaffaCakes118
Size

19KB
MD5

b850cebde6538bf5b1bdf510429a51f5
SHA1

0203ec03bd05ea709fc87114a1926765a85b0cc9
SHA256

9f7e04f2c7b3ccbea91f607d39bafb63f60f99d5b540c9aaded1bed0e19ada18
SHA512

6367bf8604d9fac7d1a329fdb6127115307aeb073871ac3c6838a91649dfb9ae128ba8ed03bcf38f8ff931600b7b9bd3fac32eb41641ede14c9269e5d8a33b2e
SSDEEP

192:Z7LlK0b00GZI6Wpo5rXPjtetGQoEhyLPkdoKnrdniq2j0x5D0sgaBacKAomw4:ZNVGZHf/vPsoKnr5aIxesgzDm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b850cebde6538bf5b1bdf510429a51f5_JaffaCakes118

Files

b850cebde6538bf5b1bdf510429a51f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE