35b82869373b8b8744b22dec43db8698_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b82869373b8b8744b22dec43db8698_JaffaCakes118
Size

69KB
MD5

35b82869373b8b8744b22dec43db8698
SHA1

24e236adae740fd2aced97a287d980c65f7506b4
SHA256

817f3875b4954ddd432c3f8ff6b4d6b50a49caa321a5893de918dcbe54d1d365
SHA512

e2b912ff19eaf71bd6ea0203c1243f7d83089f0ea46a361f1159411a4abe4c5d24922d95a6c88341e8a8753ef4a5aeb7b57b8a7ac6eca23a24a9b18d4db19df4
SSDEEP

1536:slinjEF9U8dq2R+L+3q3k8UwG6BU4P2w91XoImq/tCEaLjKXB8:fEPdt4k8UwGC/14pYeU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b82869373b8b8744b22dec43db8698_JaffaCakes118

Files

35b82869373b8b8744b22dec43db8698_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50194329e039f7615142f3ed88f7fc7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GetTickCount
RtlUnwind
CreateFileA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
WriteFile
CloseHandle
CreateProcessA
ReadFile
IsDebuggerPresent

advapi32

CreateServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ