dcca76775b7b572afa36b5bd4a058a6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcca76775b7b572afa36b5bd4a058a6d_JaffaCakes118
Size

9KB
MD5

dcca76775b7b572afa36b5bd4a058a6d
SHA1

8fadab616f6f73914a6cb16365104c6f6be2caf7
SHA256

3921539ab2b676cbe86e2d3e5dc762666aa2a6bb57901231870fe1ebfdf90efa
SHA512

02a786fcedb6c3ef5847acad5059ca18b0dcce4bf99c561a17df5429830cb100b783bf562312aea59d3fd7db8d09fa04abdcb87392908c732b184726626c21c9
SSDEEP

192:xVMWw2cKsTPuvhchO93XuwbHicTj2sJ9:xqEcKscIO9UcPPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcca76775b7b572afa36b5bd4a058a6d_JaffaCakes118

Files

dcca76775b7b572afa36b5bd4a058a6d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4fb7455288c66bb16b592a567af93381

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx
GetMessageA

kernel32

CloseHandle
CreateFileA
CreateThread
DeleteFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 993B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE