2f325a295d41fdd6d682f955ef0296b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f325a295d41fdd6d682f955ef0296b6_JaffaCakes118
Size

19KB
MD5

2f325a295d41fdd6d682f955ef0296b6
SHA1

45aaf767fb355a1d645226f8b174f61a266c853e
SHA256

3a43dfc67060f8126bfd63d9a86f114a21c4a80100e4e9293a6b836bf260c162
SHA512

f80124d02c24265ed71d07188d7af0148c4c470c944712a26bf22b02070c78379eff21a7823be97eeb2ce4d7fc2265b73f6b669f9391f6893ffe6628337fd8bf
SSDEEP

384:tLxGJkUzfkRF2oShhoMwhxU3HqUUTHbqXGOS:AkRF2oYhwWKU28Gp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f325a295d41fdd6d682f955ef0296b6_JaffaCakes118

Files

2f325a295d41fdd6d682f955ef0296b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3299009894fc8fb0acf034d82f5c2410

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
DeleteFileA
VirtualFree
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
ReadFile
VirtualAlloc
GetFileSize
HeapAlloc
GetProcessHeap
lstrcatA
MoveFileExA
CreateFileA
WriteFile
CloseHandle
SetFilePointer
FindFirstFileA

advapi32

EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ