0ec596df092bc36af0f8c6c9ace11b34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec596df092bc36af0f8c6c9ace11b34_JaffaCakes118
Size

227KB
MD5

0ec596df092bc36af0f8c6c9ace11b34
SHA1

479b0eefa0686d014252da2754def78a53ee233e
SHA256

fbda0db8b2f886ad0dfc188e3c7f4bb0790ac6477383acc6668e6c1c8f41bffa
SHA512

41424abc7be044d1a52058496e5b8351ace1d042c4fcecbd236cbb40cedd37b8b15f3fc717aa921cd0db7fb71d5507721129e72e755d1524fd2bf3968a36c2e8
SSDEEP

3072:lGxJ9/c9Ko250b/jDe72DTjMbh1+u7jb2WLyYAfeX4uYrpMXexhn5V7B:jKz2382vaDjb2veepj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec596df092bc36af0f8c6c9ace11b34_JaffaCakes118

Files

0ec596df092bc36af0f8c6c9ace11b34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

493fadfe59ec1ccb667d3415d5357692

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
lstrlenA
GetCurrentProcess
GetProcAddress
lstrcmpiA
CloseHandle

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 216KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE