02bc370ebafc10c55c4f129df1e6f74e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02bc370ebafc10c55c4f129df1e6f74e_JaffaCakes118
Size

64KB
MD5

02bc370ebafc10c55c4f129df1e6f74e
SHA1

8613e67093901dbde84f469b07b9a62061baa5fc
SHA256

9034481e7a001f95e742a9b33b5301cafa7b65aaf30ecb376a9a4702bdae9126
SHA512

7fa6d97268700bfb86b1d1976bcb9bf3949b883c1a15b33848261d32e23dfc29709defbd6511f52e01a9de069bf9adc872b16fd46c15938c15a6a90b0ac9c5ee
SSDEEP

768:82mYO7tCtKraZc7I+rJEroP3cTfplMSbl9w:82m7rKulMA3Qfpm0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02bc370ebafc10c55c4f129df1e6f74e_JaffaCakes118

Files

02bc370ebafc10c55c4f129df1e6f74e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8ef03178a8859472829d84e065255fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
CloseHandle
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
SizeofResource
FreeResource
GetModuleHandleA
DeleteFileA
GetModuleFileNameA
SetSystemTime
GetSystemTime
GetCurrentProcess
GetProcAddress
GetSystemInfo
GetLastError
LoadLibraryA
LockResource
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ