275429d1721f379cd107e2e20ec168c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

275429d1721f379cd107e2e20ec168c6_JaffaCakes118
Size

270KB
MD5

275429d1721f379cd107e2e20ec168c6
SHA1

f0563282236137bf1ae0bdee767643220c160563
SHA256

4c4137b852a84f35496d4ebd02e09b08cdd709ce18dbaf7760e65314c38b591d
SHA512

55d83c4d1b83c7ea6cf6a5eee64f2e6e0cd22ed31b10ae9419a45613de479c14f7cc0352a7d1a616d23f5d0e7366f8ac936ef24b05e03c8dcc00e8a85ba34b35
SSDEEP

3072:TbAABdQhskXk26201sVQ7imPRzZ6f/jvZImzpODzMj3dD6Y5a5H+pN/jXqMoV:AIkz69sk9Zl6flItDy5a5epx7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
275429d1721f379cd107e2e20ec168c6_JaffaCakes118

Files

275429d1721f379cd107e2e20ec168c6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

2975142ffdb3a5fbe5e4a069b2afc67d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imagehlp

CheckSumMappedFile

kernel32

GetVersionExA
GetTickCount
GetWindowsDirectoryA
CloseHandle
SetFileTime
WriteFile
CreateFileA
FlushFileBuffers

advapi32

CloseServiceHandle
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
StartServiceA

msvcrt

free
rand
srand
_access
sprintf
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ