dbc054a015d8b2477ff6b1ef55939461_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbc054a015d8b2477ff6b1ef55939461_JaffaCakes118
Size

3KB
MD5

dbc054a015d8b2477ff6b1ef55939461
SHA1

67ff72097d1d8ecebecafc1af1cdfae405ee5ebc
SHA256

9fb1c4ddbe0a6648f0ee03c45da0b454959dd1246270eff7d93111b78dbde8ca
SHA512

e5503ad82668b9045c60144a50bd1b778fa0fce223032a2d0bb4da1da18e9cff5fa1fb1a08623129bade4dd26926daeccb1685d34c2a105e6bc853d20ac87a28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbc054a015d8b2477ff6b1ef55939461_JaffaCakes118

Files

dbc054a015d8b2477ff6b1ef55939461_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55d7c2d261d29a9b903ca5248df91242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

kernel32

CloseHandle
CreateToolhelp32Snapshot
DuplicateHandle
GetCurrentProcess
GetModuleHandleA
GetProcAddress
OpenProcess
Process32First
Process32Next
TerminateProcess
VirtualAlloc
VirtualFree
lstrcmpiA
lstrlenW

user32

CharUpperW

Sections

.text
Size: 1024B - Virtual size: 938B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 437B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE