14c72810daac338c75226720234a3648_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14c72810daac338c75226720234a3648_JaffaCakes118
Size

138KB
MD5

14c72810daac338c75226720234a3648
SHA1

a598f21654e110f2d3eb6d2b9f6b00563e1b35c4
SHA256

3e50534390c932e73a512f24354441a271fc430dc12301a137bbcab3c7da05ea
SHA512

98e9971d707e834265683cfabebd552f07a234101a74c6c40198f82599fd8aefdbaa6f3c9bd4b7166dcdfdf48527a423fe855dc8059f44936664745c7108d51a
SSDEEP

3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5Rrt:3JqxDbc0tF1fIdOBUS5Bt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c72810daac338c75226720234a3648_JaffaCakes118

Files

14c72810daac338c75226720234a3648_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71f458a3392b1762de738f2a837c2b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE