3c15369e272190582280b987db030d5c_JaffaCakes118 | Triage

Sharing

General

Target

3c15369e272190582280b987db030d5c_JaffaCakes118
Size

66KB
MD5

3c15369e272190582280b987db030d5c
SHA1

7ce52289dda7ce04fa076d6d304237585b6eda05
SHA256

1cede1cb3b854c3623f5cd20b60575355be7b885c58a6d7f5da14e61de0ca733
SHA512

e3ed86527bf15ce4692208a1e0f7b601ce4125571d0e002eae78646aa002032125e5f8d7d5d319e03b90b065bda76e00e6c4e7b9427c4426611cea577fa9b83c
SSDEEP

1536:ibx6sLU7cZMX1hrPuihzun6mLksGRXrDWY4:iN6WUQZGhrPVCtU314

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c15369e272190582280b987db030d5c_JaffaCakes118

Files

3c15369e272190582280b987db030d5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50194329e039f7615142f3ed88f7fc7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GetTickCount
RtlUnwind
CreateFileA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
WriteFile
CloseHandle
CreateProcessA
ReadFile
IsDebuggerPresent

advapi32

CreateServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE