080e6056bb634db0ca0281f0a2e1f40c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

080e6056bb634db0ca0281f0a2e1f40c_JaffaCakes118
Size

103KB
MD5

080e6056bb634db0ca0281f0a2e1f40c
SHA1

fbe3b9e8b738ea92eba1752a707fc312aae500b8
SHA256

78074191806c5291da8620b5a2d1f2b5a1f1ae030800f2f0aafc8245454cd1f0
SHA512

af0b02bc6e0cd2455b59b357cdb123985323c91285f9b0d1e3c278b67f1168b2e0a86104d40f07ef47be6cd3104d635e5269f62d625b2166c71af6b5bd8ffdf4
SSDEEP

3072:yNbtz8WfJOiAfm5o280PjiEOpMyGwP+Lf7+s+QwREyKFh/4:yNxz8WJAfm5380biEYK+2w6yKFd4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080e6056bb634db0ca0281f0a2e1f40c_JaffaCakes118

Files

080e6056bb634db0ca0281f0a2e1f40c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad275baa0c9d4c53075f21182c5cc1ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegCloseKey
RegConnectRegistryA
RegCreateKeyA
RegEnumValueA
RegQueryValueExA
RegSetValueExA
StartServiceA

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateMutexA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetDriveTypeA
GetEnvironmentVariableA
GetModuleFileNameA
GetSystemDirectoryA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
OpenMutexA
ReadFile
SetCurrentDirectoryA
SetFileAttributesA
SetFilePointer
Sleep
WinExec
WriteFile
lstrcatA
lstrlenA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE