b9325277bc7bf1c4727423ec4a6fa049_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9325277bc7bf1c4727423ec4a6fa049_JaffaCakes118
Size

31KB
MD5

b9325277bc7bf1c4727423ec4a6fa049
SHA1

8be860db3fa6411fc9f8d22f82ed793dfc76db08
SHA256

0a7c27a4cc4ee4b2c736af43cf0368f6d0a9be04782943b245dd70195120a71c
SHA512

598ea1656ee48978da4c453db15e422ec6a23e379a00aa69e2c38287bfeea42e154cdc9a76a23c6f1fd57ce4c4475b1ac6bf8644e9de14a026959607ff07428c
SSDEEP

384:vTVonSVrINqkBSzZV569uvp8lcmZOIA6f7IsBJi8CqO0bwE36sIOEUHZ9d9PYotw:vGSJIYk28lTH3TnZL9TtsQqOjw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9325277bc7bf1c4727423ec4a6fa049_JaffaCakes118

Files

b9325277bc7bf1c4727423ec4a6fa049_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea32237adc8644cb3b1463d446ae3c26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetThreadContext
ResumeThread
SetFileTime
SetThreadContext
Sleep
VirtualAllocEx
GetModuleHandleA
WriteFile
WriteProcessMemory
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
GetModuleFileNameA
GetLastError
GetFileTime
GetCurrentProcess
ExitProcess
DeleteFileA
CreateProcessA
CreateFileA
CopyFileA
WideCharToMultiByte
CloseHandle

user32

ExitWindowsEx

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegSetValueExA
RegDeleteValueA

ole32

StringFromCLSID
CoTaskMemFree
CoCreateGuid

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ