19e0910246a9b4cc6a4103f01861fd6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19e0910246a9b4cc6a4103f01861fd6f_JaffaCakes118
Size

10KB
MD5

19e0910246a9b4cc6a4103f01861fd6f
SHA1

b19ec92925a0066cca9df8cda818198f8b55552a
SHA256

27ebe11f54b6ffecd68936e008fe6902cf7a87bb47d59868aa14934cc8d16f5c
SHA512

e93a5e1bf8d401f64acbd7e4f99141d221743ee48e13d29b09f611ceff05676cbb903980dc01634aef34b8ac69de5c5296cd713d13f492e5f9cf8d2565a61e8c
SSDEEP

96:kRgEElmy6jfcWVmz/NURMPwy5mQVez8vG3EyLFxYCH//cZpqYggjump31siD1IFw:bmyQ8TNUMwYbTI1Cpfggju4ls67

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e0910246a9b4cc6a4103f01861fd6f_JaffaCakes118

Files

19e0910246a9b4cc6a4103f01861fd6f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3f613b7473ddf1af7c41d055b0634784

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GlobalFree
GlobalAlloc
GetModuleHandleA
FreeLibrary
lstrcatA
Process32Next
lstrcmpiA
Process32First
OpenProcess
GetCurrentProcess
lstrcpyA
MultiByteToWideChar
lstrlenA

user32

ShowWindow
FindWindowA

advapi32

DeleteService
ChangeServiceConfigA

msvcrt

strrchr

Exports

Exports

testall

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ