2a082f53e14c51910151fedd245bf23d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a082f53e14c51910151fedd245bf23d_JaffaCakes118
Size

20KB
MD5

2a082f53e14c51910151fedd245bf23d
SHA1

ff78f533dbc93316df1d8f411fd71d2474c3aee5
SHA256

01d9b0a7b2e3530245a8e1e0b42a0b9d3cd36ae7d56ef0417a2a5ededa27ac74
SHA512

b9ba8af07e704823f338a4d6fbcfe194a4d73b9273206c6c9090dc9b5250bd9cb6b0cb1d2758d6c5cebca10a243dbb647d93bcee0cefe4279e0f097ea49adc4c
SSDEEP

384:d/HbuFnMY6RmExX+6trRANN8zIUWH+gTRFaH4x80B/PKTG6We6R/10dlGTSFZwaP:NbrYOhtNAQIU8to4f/PRr0dltZwkRz9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a082f53e14c51910151fedd245bf23d_JaffaCakes118

Files

2a082f53e14c51910151fedd245bf23d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff3357c629adaa00f6f0d86be23f113e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileTime
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetProcessHeap
ResumeThread
GetPriorityClass
OpenProcess
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread
GetProcAddress
FreeLibrary
GetVersionExA
GlobalMemoryStatus
CloseHandle

user32

CharLowerA

advapi32

OpenProcessToken
LookupPrivilegeValueA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE