ea7ce91a54595ca9f2e759f8901d6229_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea7ce91a54595ca9f2e759f8901d6229_JaffaCakes118
Size

28KB
MD5

ea7ce91a54595ca9f2e759f8901d6229
SHA1

5a5e6ac1fef9ea0249889a7d45dbdd6727be0cc8
SHA256

fe5aaefa3aaf6f416aece3cec14c94e7a4a56292a5cd34578285977948db4859
SHA512

a067c3a7a7ac0da9075415b67c96367e4b58117d3e3287fde43d7ed7155feb77f6acb4f8b5f65bd725c2d31e7f2c9a4be526760a5269081af3ce656358ff68f9
SSDEEP

96:CMM0o1OKkb2eYiOeAlq/X88tvhHsmH0FngPnXDSS2A0Zo6JU:7MlsKFeR5wq/XFtvFsAS4yob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea7ce91a54595ca9f2e759f8901d6229_JaffaCakes118

Files

ea7ce91a54595ca9f2e759f8901d6229_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1fca45f4074f920eee1cb8fc52e4f7d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
LoadResource
FindResourceA
GetLastError
DeviceIoControl
FreeLibrary
CloseHandle
LoadLibraryExA
GlobalAlloc
GetProcAddress
GetModuleHandleA
ReadFile
GetFileSize
WriteFile
GetSystemDirectoryA
lstrcatA
SetFileAttributesA
GlobalFree
CreateFileA

user32

MessageBoxA

advapi32

OpenSCManagerA
CloseServiceHandle
ControlService
StartServiceA
OpenServiceA

msvcrt

_initterm
??3@YAXPAX@Z
??2@YAPAXI@Z
free
malloc
_adjust_fdiv

Exports

Exports

RestoreSSDT

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 999B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ