2fc7ce087fc7c8847c1de12ba5ca14d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fc7ce087fc7c8847c1de12ba5ca14d8_JaffaCakes118
Size

5KB
MD5

2fc7ce087fc7c8847c1de12ba5ca14d8
SHA1

6c675c9d595b3c8009ecd0301d3827709e4cbbf0
SHA256

47e240bd151ff2e2f779fed9c4ad347f726c302930c4743338759b8315153003
SHA512

7330f49acfd06210214c4df360686172bb6761fff75fc45b263fa7284594f0d509c843854656c6bab44f550e876ce126a67e58b0be6d3fec7ac835d2a5e7c646
SSDEEP

96:PO6vH7qpD3TcN5WT2JAKzhpZWOBMHbJAAKR9stRLt3dk:PHvuDcDzDrMsR9aLt3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc7ce087fc7c8847c1de12ba5ca14d8_JaffaCakes118

Files

2fc7ce087fc7c8847c1de12ba5ca14d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4657b6ad4ab7cc4555eb9bc9c7554106

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strstr
memcpy
RtlZeroMemory

kernel32

CreateMutexA
DeviceIoControl
ExitProcess
FreeLibrary
CreateFileA
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
lstrcatA
lstrcmpiA
lstrlenA
CloseHandle
GetCurrentProcessId

user32

DestroyWindow
DispatchMessageA
GetMessageA
LoadCursorA
PostQuitMessage
RegisterClassExA
SetTimer
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA

advapi32

StartServiceA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE