e2613b777a3ceb0ab016c7c0809f105f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2613b777a3ceb0ab016c7c0809f105f_JaffaCakes118
Size

80KB
MD5

e2613b777a3ceb0ab016c7c0809f105f
SHA1

77fecb8154b09ad80078b99993d58f38928d19d3
SHA256

e95a7a72eae22c191f1ca713d0f654c3b4d84f52edc26b3c306a619ab059ee0c
SHA512

93ba2b0cbd04d8d968c518f781ed03d704ed925b22b411efa0dcf348b2d375f202e2a8957b0ac95ab37de964627937afe9ba0d5e4fa9473ddbbd252f6f53c737
SSDEEP

1536:KBQcOBaZlAOaI+f9smsUEZXlOtogMbiGOPAbQGT3D:KBQ5QraIIq0og0OPiQGTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2613b777a3ceb0ab016c7c0809f105f_JaffaCakes118

Files

e2613b777a3ceb0ab016c7c0809f105f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d48a435e35e8c89aa53a0eac502161df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
WriteFile
CreateFileA
SetFileAttributesA
DeleteFileA
GetCurrentProcess
GetSystemInfo
GetLastError
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerSetControlDetails
mixerGetLineInfoA
mixerOpen

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ