1b5e39c891f9808690ec802f4f3dd716_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b5e39c891f9808690ec802f4f3dd716_JaffaCakes118
Size

20KB
MD5

1b5e39c891f9808690ec802f4f3dd716
SHA1

c44a299947b3a08e6764b1a7edf39140595e6de2
SHA256

cfffa63793292c671abf96465df193b994f5dc4d804db53e47c07bc1e178f279
SHA512

9bde4c15643a427ca5d0b46db8c88ddc252f9411f3584a66e160722cde010cbfcf4af0b79374beef18476c12e397ec2a96929044b018168173827387455f940d
SSDEEP

384:XgJ2F05aMFe7INOsU28He3eamHnewbteNzdFPadSH555iXZ58xCW4N:XgJSVMFUINOsU28b7eBVPYSH555ip58S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b5e39c891f9808690ec802f4f3dd716_JaffaCakes118

Files

1b5e39c891f9808690ec802f4f3dd716_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61b11eaa20d3cb6872100408c25df775

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetTempPathA
DeleteFileA
GetLastError
Sleep
CreateProcessA
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
GetTickCount
CloseHandle

advapi32

DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA

msvcrt

strrchr
_strlwr
strlen
fclose
fwrite
fopen
sprintf
memset
strcat
strcpy
_stricmp
rand
srand
_snprintf

shlwapi

SHSetValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ