dc2c5f826509196fa7926194bc3c65a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc2c5f826509196fa7926194bc3c65a0_JaffaCakes118
Size

64KB
MD5

dc2c5f826509196fa7926194bc3c65a0
SHA1

e09b957b180e9a56434e02b2c7db6284fdc36d81
SHA256

c16343ff3f56989a80cfc15a8cf0f1776c93d6cfb892360787724e1d84ff26c0
SHA512

6029800174de878afe7582288af35289bc39bde1746e1d7de673276b15f67e3601d1f998733d460498e77aae7c851447e125a94dfeed1193f992db1fd8466ce4
SSDEEP

768:dS1+LUC2oAWjPCQ1cgHuV1txmQNiV5+6V8pG5/X8+dX:dS+Z2oAW7lYztxFiV5+6V8pGdX8+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc2c5f826509196fa7926194bc3c65a0_JaffaCakes118

Files

dc2c5f826509196fa7926194bc3c65a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b599fcc0bdac1f16592a3e551046a7f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
WriteFile
CreateFileA
CloseHandle
SetFileAttributesA
DeleteFileA
GetCurrentProcess
GetSystemInfo
GetLastError
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
RegDeleteValueA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerSetControlDetails

msvcrt

_controlfp
_except_handler3
??3@YAXPAX@Z
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ