03262354a3938dd1ff6198cb777e8290_JaffaCakes118 | Triage

Sharing

General

Target

03262354a3938dd1ff6198cb777e8290_JaffaCakes118
Size

26KB
MD5

03262354a3938dd1ff6198cb777e8290
SHA1

705bbb62fdc0a41fe20f404e51eabf7e2c01a473
SHA256

959d3a95d02b6543f728acd25bcda9ecd25752f53e7712ffae8dc3bbf9fc4f50
SHA512

19bb1362086b47bae662fd48a1aa743cbcb8c5a26ee09a2c5ec9c3b2a7581a5a95d923125430d65123af617b52bd5c4baa939e7995a0f393bdf46db7ebd4e648
SSDEEP

384:QPudt4fxDY9mIQwOWBf2WOXwjEenXpQI0DR7tzMb0pD2+D/AEEF3dcYzy+:Qi45DHIQwloWOEwttzZ7leOp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03262354a3938dd1ff6198cb777e8290_JaffaCakes118

Files

03262354a3938dd1ff6198cb777e8290_JaffaCakes118
.exe windows:4 windows x86 arch:x86

166a93a279cb38dc6e4023e440bd13eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalUnlock
GlobalHandle
ReleaseMutex
CreateDirectoryA
ExpandEnvironmentStringsA
GetModuleFileNameA
FreeResource
OpenMutexA
GlobalLock
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
LoadLibraryA
GetProcAddress
ExitProcess
CreateFileA
WriteFile
SetFileTime
CloseHandle
lstrlenA
Sleep
lstrcpyA
CreateMutexA
lstrcatA

advapi32

StartServiceA
OpenServiceA
CreateServiceA
ControlService
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ