0ecf8c5cf65a70f5027fc9bae33ee346_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ecf8c5cf65a70f5027fc9bae33ee346_JaffaCakes118
Size

25KB
MD5

0ecf8c5cf65a70f5027fc9bae33ee346
SHA1

402bb76512d599c69fb68d29ec5c956fb29084d5
SHA256

938ee454a16ed33df7c62da5e95a2bd6865ba7ed395b500b20c679afc11cd427
SHA512

ccc3017372a00e2bce57deeaabae2e5708a817721a2682eaf26bf30702958ce302c40e07d19bc49ba981af0f562d9938b84ee7818dd0cf87c79fc8b9f28391dd
SSDEEP

384:RbYveGiPJdSy4XFa1+9iIVeS33AOgb1hEKItt0/7tADjXOBcQ4IIQO2bQPMT7NiZ:uAhdSy41a1aiIV05WLUAXX6crQKMX1it

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ecf8c5cf65a70f5027fc9bae33ee346_JaffaCakes118

Files

0ecf8c5cf65a70f5027fc9bae33ee346_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50194329e039f7615142f3ed88f7fc7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GetTickCount
RtlUnwind
CreateFileA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
WriteFile
CloseHandle
CreateProcessA
ReadFile
IsDebuggerPresent

advapi32

CreateServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ