0798cb9eeff8c4ac8769ad6495df1e7e_JaffaCakes118 | Triage

Sharing

General

Target

0798cb9eeff8c4ac8769ad6495df1e7e_JaffaCakes118
Size

15KB
MD5

0798cb9eeff8c4ac8769ad6495df1e7e
SHA1

7aa17c7c75568bcd07af0d66aef56b2f611a10a3
SHA256

0da4c63a600fdbfdf283f8332c23d9950a280c1d4d9270a8514a9c62f350da62
SHA512

95d786ec543b6f75c7e16b4e6128e4a1848bf35d36bf0e325ebc106f32a76a480b7d1c4b895ed4122c0fb66cc99686dbfb3a719d8c056b74126ea2a242121d17
SSDEEP

192:CvZsI5TQ+T8B4cULET6fYgggAzsXfRj2gZAoWcT5fZPgZCXtP1oyn:CpTi4FLETMYYAzKlA/ctRT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0798cb9eeff8c4ac8769ad6495df1e7e_JaffaCakes118

Files

0798cb9eeff8c4ac8769ad6495df1e7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9f5d5279569966d6be3167b17037dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
SetFileAttributesA
GetFileSize
GetSystemDirectoryA
ReadFile
CloseHandle
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetVersion
lstrcmpA
GetModuleHandleA
VirtualAlloc
lstrcatA
GetStartupInfoA

advapi32

StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetUserNameA

msvcrt

memset
strcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE