2d38995dbde76b4e2a4649d240e712d3_JaffaCakes118 | Triage

Sharing

General

Target

2d38995dbde76b4e2a4649d240e712d3_JaffaCakes118
Size

22KB
MD5

2d38995dbde76b4e2a4649d240e712d3
SHA1

ca4e19101fdd3fdfac8b1f137cf4d0f47087d6e2
SHA256

33c405b07741d2c8769ba2b39da1e88ee54523f815edeb42831e25d5f79878d9
SHA512

9e0e5252832df68ae149bc3f42f02639db0b652c73369d93c94473a6be181342ce30cd75495ab7b3833a764fef2237028f300f733f27563b12bb154627c53ab6
SSDEEP

384:lqrzpcFaKMqDhXU/d8RykgACflU7pkFriD9b/vISEzbHrK555MRcrKLMCW4N:c2MhqDid8RyeCfifhoxHrK5558+KocN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d38995dbde76b4e2a4649d240e712d3_JaffaCakes118

Files

2d38995dbde76b4e2a4649d240e712d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba0ccec1498c3d09fd8786fd505a903f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
CreateProcessA
Sleep
GetTempFileNameA
SetFileTime
GetTickCount
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
DeleteFileA
MoveFileExA
DeviceIoControl
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetTempPathA

advapi32

ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService

msvcrt

strrchr
_strlwr
strlen
fclose
fwrite
fopen
strncpy
fread
strcat
strcpy
sprintf
memset
_stricmp
rand
srand
_snprintf

shlwapi

SHSetValueA
SHDeleteValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ