04cb0642fd6f11ac149213e98611885b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04cb0642fd6f11ac149213e98611885b_JaffaCakes118
Size

27KB
MD5

04cb0642fd6f11ac149213e98611885b
SHA1

b0592daae5e26c961609f878e42a07101e8c4101
SHA256

994844e42484c7e546441b5106b633ee5373c41811174d9fd7dab023dda771ce
SHA512

b33f4839821c65e0042e1e169a1086dcc82b470c80bf24905878b3325e1d0b0b6bf55b61083993669d304a2c95c4776ef1bbf6635ad2573a4fe20f40b15a4c8c
SSDEEP

768:x3Vgr0cOLPSuiPNadG0oXDUswpcZhA/kBcG:m0vL6HaADUNcch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04cb0642fd6f11ac149213e98611885b_JaffaCakes118

Files

04cb0642fd6f11ac149213e98611885b_JaffaCakes118
.exe windows:3 windows x86 arch:x86

de95250cf53a971056951e748a573b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenSCManagerA
CreateServiceA
DeleteService
OpenServiceA
StartServiceA
ControlService
CloseServiceHandle

kernel32

GetLastError
CloseHandle
CreateFileA
GetVersion
GetEnvironmentStrings
GetCommandLineA
GetCurrentDirectoryA
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetFileType
GetStartupInfoA
GetProcessHeap
WriteFile
HeapAlloc
HeapFree
WideCharToMultiByte
FlushFileBuffers
SetFilePointer
SetStdHandle

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ