fa5155d0a339532c847febcf76934ae7_JaffaCakes118 | Triage

Sharing

General

Target

fa5155d0a339532c847febcf76934ae7_JaffaCakes118
Size

21KB
MD5

fa5155d0a339532c847febcf76934ae7
SHA1

882dfba26f4d37072c6fc30059fc3cf2f9b8565d
SHA256

c056a42a2fbc5b8d2b381bd9a7e90c2dd813647bc9c9b442202b353b3754a0e8
SHA512

98350e241e6833af99952d8bbf1c4e0c2906a0c3e7bd60d52a216353cf370ca57a6513c80f3039f305a4f90ee687640702cb9fb6e658fdd8dd3f90d268438afd
SSDEEP

384:gldu0ad6pEVz2VE4JsfPBs321BZi4Zx8SpoRFv9R/ii5550419bKL5CW4N:2gw2VziEqsf++Xmv9R/ii555LKtcN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa5155d0a339532c847febcf76934ae7_JaffaCakes118

Files

fa5155d0a339532c847febcf76934ae7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0fdf3e193c54fa2bf9cf2c8d3faed27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
CreateProcessA
Sleep
GetTempFileNameA
GetTempPathA
SetFileTime
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
DeleteFileA
MoveFileExA
DeviceIoControl
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetTickCount

advapi32

ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService

msvcrt

memset
_strlwr
strlen
fclose
fwrite
fopen
strncpy
fread
strcat
strcpy
sprintf
_stricmp
strrchr
rand
srand
_snprintf

shlwapi

SHSetValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ