25a894759d35bc22ba88eb3b34da8909_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25a894759d35bc22ba88eb3b34da8909_JaffaCakes118
Size

68KB
MD5

25a894759d35bc22ba88eb3b34da8909
SHA1

889c8dfac3ec585b8a6b39bc9fd85b655a049c52
SHA256

e348afa74fa3fde918a34daded242e346b4ba64ba10a99783e4f78d902aecd0f
SHA512

a3f8f57cd2f269fa08a8472e32fbbe20e7898e62f861b1461b770f3b7353a098018236b17038d231345b4b907cad5791985093dfb8aade2ddac2fc126e4ee8ce
SSDEEP

1536:4RgaoDu3BN9RR64byc6H5c6HcT66vlm3GGk5Euug:4+yH9764byc6H5c6HcT66vlmm+uug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25a894759d35bc22ba88eb3b34da8909_JaffaCakes118

Files

25a894759d35bc22ba88eb3b34da8909_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7401947d3623a2199a2114d62923cd5

Headers

Imports

advapi32

CloseServiceHandle
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA

kernel32

ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FlushFileBuffers
GetCommandLineA
GetCurrentDirectoryA
GetDriveTypeA
GetFileAttributesA
CloseHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetVersionExA
GetWindowsDirectoryA
CopyFileA
InterlockedIncrement
LoadLibraryA
CreateFileA
ReadFile
ReleaseMutex
SetEndOfFile
SetFileAttributesA
SetFilePointer
SetFileTime
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
CreateProcessA
WaitForSingleObject
WriteFile

msvcrt

_assert
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
abort
atexit
fprintf
free
__p__environ
malloc
memcpy
memset
rand
signal
srand
strcat
strcmp
strcpy
time
__set_app_type

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE