f1febac1d2b6a1fc4c4d194128718097_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1febac1d2b6a1fc4c4d194128718097_JaffaCakes118
Size

140KB
MD5

f1febac1d2b6a1fc4c4d194128718097
SHA1

47e445cefedc6f2b0bb143ed0699e3ba9ee929a5
SHA256

e83e775b985b4992207d01f642872db022c4a73a8bbb6745df4357a7c43b09e4
SHA512

29095e6132a6fe0f66d8ad0eaaaa9f6af69bc5c3e58d7a157fe39761c8b3d22ca6a5091c3fb2f386842cf23390958f8d1df408e134798cfcbafe1717a77ff1ed
SSDEEP

3072:mmsKKwwBk29dh7IRtvi6EHEKKgSDgTI2uhs7uR:z3Kni29dORE6EWgJ6nR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1febac1d2b6a1fc4c4d194128718097_JaffaCakes118

Files

f1febac1d2b6a1fc4c4d194128718097_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69d3d0a2b864eff2c9a05213a571a3c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
OpenEventA
CreateFileA
ExitProcess
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA
HeapFree

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE