22624eb0cdb5747b5dd489a8962cce12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22624eb0cdb5747b5dd489a8962cce12_JaffaCakes118
Size

16KB
MD5

22624eb0cdb5747b5dd489a8962cce12
SHA1

dda3c005da311b3883fe2ea5d78b21b8163a2ec6
SHA256

515f43fb7d4e3abe9ff1153a85e7417499a57288a0c7c48e513c6d9f12cb883e
SHA512

d00a9dd6a331788c3ac76cb7527955c8284b0da4a519ccf7a6ca60f55092686affee7d90c3d3a7d475d8b1a3ad22d895e9e6b7c62b780e1ee818af097df51c15
SSDEEP

192:CQ+T8B4cULET6fYgggAzsXpRj2gZAoWcT5dxWSIjSP1oyn48Og:sTi4FLETMYYAzolA/ctdUs10g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22624eb0cdb5747b5dd489a8962cce12_JaffaCakes118

Files

22624eb0cdb5747b5dd489a8962cce12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5a35d6470fc60536e58aca81a1e087e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SizeofResource
CreateFileA
LoadResource
FindResourceA
CloseHandle
GetFileSize
SetFileAttributesA
lstrcatA
GetSystemDirectoryA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetVersion
GetModuleHandleA
ReadFile
GetStartupInfoA

advapi32

StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService

msvcrt

??3@YAXPAX@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??2@YAPAXI@Z

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ