341c6a9d942d7d480871cb407b627f31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

341c6a9d942d7d480871cb407b627f31_JaffaCakes118
Size

8KB
MD5

341c6a9d942d7d480871cb407b627f31
SHA1

9bf4c3e69406b6469434f5a220026c2e0ca9a330
SHA256

31fb0bf7bef8afc6970ef353bdd218d67c05eef9d688df3cf92e1ad61a115f10
SHA512

d0b5b20c5552788f64a81a04a7c215ca87db3ab559990767a77d54e5f7920c0b699a09de9be2b1a090b7fc691ade1f95a71d4f63324db122dcb6fc8fe83a3420
SSDEEP

192:CkutmBq7dO4/lTkny185qzwgA0gkhnv4DVsAQuT61oy:But92WzwSg+v4DW861

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
341c6a9d942d7d480871cb407b627f31_JaffaCakes118

Files

341c6a9d942d7d480871cb407b627f31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df7c52bf5cbdb14fec20afebfa548dbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCurrentThreadId
Sleep
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
GetLastError
SetLastError
lstrcmpiA
lstrlenA
lstrcpyA
FindResourceA
LoadResource
LockResource
SizeofResource
ExitProcess
lstrcatA
GetModuleHandleA

user32

GetInputState
GetMessageA
wsprintfA
PostThreadMessageA

advapi32

RegSetValueExA
CreateServiceA
CloseServiceHandle
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
StartServiceA
OpenServiceA
OpenSCManagerA

msvcrt

_exit
_except_handler3
strchr
fclose
fwrite
fopen
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
strstr
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ