19ad4a09dd68cd788ff6524460281575_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19ad4a09dd68cd788ff6524460281575_JaffaCakes118
Size

92KB
MD5

19ad4a09dd68cd788ff6524460281575
SHA1

553b40486bfd25eb1ce977ac32e447bc701f9f1b
SHA256

26dc6326d8096a14b0afd5f60da81114eb95b415be637068765ce96d84b0b0db
SHA512

3382e56e05ee01b87265da1db7c572f777f61227c8ef5412deb4f0e54e98a3ee7cb6e412c2e7b35a4db6ba5082964a2afa6000eca45ddbf86006eead08c5ad88
SSDEEP

1536:MeApAuvJqXh1XFl4Y5fjlpS4v7Y+A8SQgvRPF9YpUE9ynKH9WhFeNpermKJ:hAZvJqxDl5fjnE78SQgv5F9YRCOYhFeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19ad4a09dd68cd788ff6524460281575_JaffaCakes118

Files

19ad4a09dd68cd788ff6524460281575_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fcbedffa5ab5df6dcf3354e12b25fba7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringA
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
MultiByteToWideChar
WritePrivateProfileStringA

user32

LoadStringW

advapi32

DeregisterEventSource
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
RegisterServiceCtrlHandlerExW
ReportEventW
SetServiceStatus
StartServiceW
CloseServiceHandle

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 4KB - Virtual size: 812B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ