09072801965c2875103da6417205ac95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09072801965c2875103da6417205ac95_JaffaCakes118
Size

5KB
MD5

09072801965c2875103da6417205ac95
SHA1

06efb8db93348097b9597f49c5b69483fe4b7e97
SHA256

eb263846a6901036cb0e2859b1c25ee3dd15c26dc530a7c13b9547ba93265009
SHA512

ff79a605ca090c8ff3288ef3ba650f364de2c940dcae131d6b3a1730a91d550a9b9ad72e85cbe2fb445d285b7b6269d4d86a50a654f0c60510a744450ebbcb14
SSDEEP

48:qSKy/uiqf1VXZC9/03H4TlWu7p/QiNmpMlpQSytkBHAhEdIZWD5WUE5WwG:Cmuiq/4/6sWu1/fqMkS+k+UEWoUYWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09072801965c2875103da6417205ac95_JaffaCakes118

Files

09072801965c2875103da6417205ac95_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6138bdb74abc795b0a998eb00778d570

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_except_handler3
_c_exit

advapi32

ControlService
OpenServiceW
OpenSCManagerW
NotifyBootConfigStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetServiceStatus

kernel32

SetEvent
ExitThread
WaitForSingleObject
ExitProcess
CreateEventA
GetLastError
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ