JaffaCakes118_c9cc2f4fd15aedd895a64956462c4724 | Triage

Sharing

General

Target

JaffaCakes118_c9cc2f4fd15aedd895a64956462c4724
Size

325KB
MD5

c9cc2f4fd15aedd895a64956462c4724
SHA1

cdec2bf4a75fce07d6ebd1eb85bba73e893613e0
SHA256

a45c2448a9875f61c6f77340c69358a7bb777c7bcd55aa42962ccf294c078488
SHA512

f08fbb505000ff71817e48f4ab5ede7e4090b3542640ac2b5d44282d42079acbc3e823af939bc09bb1b0b1d3e0a542ad576d7b080c7970db7dff91ea9d580e1e
SSDEEP

6144:OHU8KBcYBimUsOAfcN9jGqjGSpqrVSx/1gGqgg5HOl0A:OH7a1ifsXfyKyGSp6vBggtA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_c9cc2f4fd15aedd895a64956462c4724

Files

JaffaCakes118_c9cc2f4fd15aedd895a64956462c4724
.exe windows:4 windows x86 arch:x86

d74af08b25e34adc349d1735728a0a22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

WaitForSingleObject
CloseHandle
WriteFile
CreateFileA
CreateThread
lstrcatA
GetLastError
CreateMutexA
lstrcmpA
lstrcpyA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
lstrcmpiA
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetProcessHeap
lstrlenA
GetProcAddress

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ