0d28c80ee52b4e471c3332f2ac90dd75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d28c80ee52b4e471c3332f2ac90dd75_JaffaCakes118
Size

3KB
MD5

0d28c80ee52b4e471c3332f2ac90dd75
SHA1

6c96ca0b0e01f306fef44457e9179692fc78fc80
SHA256

5b57a7bef6277b3db75f407ad03e920925d49ba89843a933b4d8f5c4b6558f24
SHA512

3bb5ae1c91c7fb5920bddf2dbe767995ea53e5bec4bc7f6df6243a1c544ff74ec4013d95755afc60946ec253d62f1f8264c5d5f1d78c6b0e1f725e36d900e078

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d28c80ee52b4e471c3332f2ac90dd75_JaffaCakes118

Files

0d28c80ee52b4e471c3332f2ac90dd75_JaffaCakes118
.exe windows:5 windows x86 arch:x86

813089cfc79726be07ab586ca105b203

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrcatA
GetSystemDirectoryA

advapi32

DeleteService
ControlService
OpenSCManagerA
StartServiceA
OpenServiceA
CloseServiceHandle
CreateServiceA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ