2ec72079e7ce89f7e6d7f43cb1c8ef26_JaffaCakes118 | Triage

Sharing

General

Target

2ec72079e7ce89f7e6d7f43cb1c8ef26_JaffaCakes118
Size

6KB
MD5

2ec72079e7ce89f7e6d7f43cb1c8ef26
SHA1

6c9c7d33d68865151f09b3c387523b6ce2124bce
SHA256

da2fc176490bcba060b90e28ae0d3a1e1abf373e611930a8d733ead32aa1aace
SHA512

a053259cdbe07f554ef4f976b1a2142c29dc0af521f2220b61ab01eebbe60d3e4599dbe8f1b92d867202d881d0b70dcfde3f11eaf1d6efef7f381bcc9fdbc3c2
SSDEEP

96:gt7M4cUJQ2pPVUMR/zQB1axUKePH+LEYQO3SpeXwTgt7Bce3iylnPtd4g6/zHX+:EMgGEUu/zS1sUvQ7Spj8t9cki0tdC/zu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ec72079e7ce89f7e6d7f43cb1c8ef26_JaffaCakes118

Files

2ec72079e7ce89f7e6d7f43cb1c8ef26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8df7327877468e3074508a01b4986243

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
__dllonexit
??3@YAXPAX@Z
__CxxFrameHandler
memset
_except_handler3
??2@YAPAXI@Z
_onexit

mfc42

ord6383
ord5440
ord6394
ord5450
ord3663
ord537
ord800

kernel32

GetSystemDirectoryA
GetProcAddress
LoadLibraryA
Sleep
SetFileAttributesA
CopyFileA
GetModuleFileNameA
VirtualProtectEx
GetCurrentProcess

user32

GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
CreateServiceA
CloseServiceHandle
OpenServiceA
StartServiceA
StartServiceCtrlDispatcherA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE