2faa012aaa38e7b792e2fc92be414b6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2faa012aaa38e7b792e2fc92be414b6d_JaffaCakes118
Size

19KB
MD5

2faa012aaa38e7b792e2fc92be414b6d
SHA1

38759527e917f9bca715dbc753d4beac84b8de2e
SHA256

93fcb06d417e3825fd02239c671e6725611397e3f3361f5a8f993d53e04b27fc
SHA512

4190379823201e346bac5c48eb9a1c778263e58fe5d0c4f1ceeb577725a3ac562f317010ef0c080c65bd0d4d054d80951f2e24c736c7a7c8b4ef814932bf8ef2
SSDEEP

384:tXEGJkUzfkRFF4zVzYDX73a6zc0l+kVIyvO0bPN:9kRFqRk/3rVzIyvn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2faa012aaa38e7b792e2fc92be414b6d_JaffaCakes118

Files

2faa012aaa38e7b792e2fc92be414b6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3299009894fc8fb0acf034d82f5c2410

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
DeleteFileA
VirtualFree
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
ReadFile
VirtualAlloc
GetFileSize
HeapAlloc
GetProcessHeap
lstrcatA
MoveFileExA
CreateFileA
WriteFile
CloseHandle
SetFilePointer
FindFirstFileA

advapi32

EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ