ed340097fcd7682a83bdd1f5faa1f70b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed340097fcd7682a83bdd1f5faa1f70b_JaffaCakes118
Size

15KB
MD5

ed340097fcd7682a83bdd1f5faa1f70b
SHA1

0f3a5caa8209680fcdaafab7f071747a083b509a
SHA256

6ab74eec07642b0e988ddfa0b165b088b47a674034642975937d7e8f2da55f72
SHA512

b635a90e4079d7ae707032bf7420068c243de02932025235987065d73f165fd616d38a239b1eddf4f6c04995358fc6a01f723d62ca5017fef14ce3344777bedc
SSDEEP

192:jvZ9+5gQ+T8B4cULET6fYgggAzsXYRj2gZAoWcT5hHJ9PhviVP1oyn:j5Ti4FLETMYYAzhlA/ct1vC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed340097fcd7682a83bdd1f5faa1f70b_JaffaCakes118

Files

ed340097fcd7682a83bdd1f5faa1f70b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c7f7842fc19ef96f2078ac50625f9981

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
SetFileAttributesA
GetFileSize
GetSystemDirectoryA
ReadFile
CloseHandle
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetVersion
GetModuleHandleA
VirtualAlloc
lstrcmpA
lstrcatA
GetStartupInfoA

advapi32

StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA

msvcrt

strcmp
memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE