11c4bb02e751b923bcfd587f0acb936f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11c4bb02e751b923bcfd587f0acb936f_JaffaCakes118
Size

3KB
MD5

11c4bb02e751b923bcfd587f0acb936f
SHA1

7a9bdba164291752cca8c33fbcf2d27d2077a543
SHA256

ab50fb2f3b29620ff16ec82648cbcf11836dd33de2ba172b418a79c3f45c59da
SHA512

7bfd30509567757b07d6acda3d68f1ebbc52a90001d117e3df2357a4d6063d38da257f015293b37fe995b5489285259bc6bdae1a2e8ef8c29dc9ca15f78f0d25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11c4bb02e751b923bcfd587f0acb936f_JaffaCakes118

Files

11c4bb02e751b923bcfd587f0acb936f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2fe004a6b2cad5f05628e1dba280c80e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateRemoteThread
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcess
GetVersionExA
GetVolumeInformationA
IsDebuggerPresent
LoadLibraryA
OpenProcess
Process32First
Process32Next
SetUnhandledExceptionFilter
VirtualAllocEx
WriteProcessMemory
lstrcatA
lstrcmpA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA

Sections

.idata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE