3c71f4083a77306ab09f459479d75949_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c71f4083a77306ab09f459479d75949_JaffaCakes118
Size

186KB
MD5

3c71f4083a77306ab09f459479d75949
SHA1

2b2227b1d782534087ca041d6b138f2972e298af
SHA256

d794b6a9dd8b8bf430e53644cbc5211c72f2e2af70c6098af9821d29cd969046
SHA512

c883cd7eca03f471ec42b96d8873bd449575efccd6c3a925b841eee2d91d4d262f458ce0280b935b7a5bf1aefbe8936b50bd5827c942e5f2c74338b2ec25ad45
SSDEEP

3072:V3e/9KQ9Pas2pQTMOH5NBXfwovqcE3EHi2IouJKHOr9scTT5bwB5R33:V3yKQ9PatCIOH5ffwovqZ3x2IfJLiB5R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c71f4083a77306ab09f459479d75949_JaffaCakes118

Files

3c71f4083a77306ab09f459479d75949_JaffaCakes118
.exe windows:5 windows x86 arch:x86

97230de7cd48723c38267bbd8da19cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
lstrlenA
GetLastError
GetProcAddress
CloseHandle
WriteFile
SetFilePointer
CreateFileW
ExpandEnvironmentStringsW
LoadLibraryA
OutputDebugStringW
lstrlenW
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetSystemInfo
IsDebuggerPresent

user32

MessageBoxA
wsprintfA
wsprintfW

Exports

Exports

ServiceMain

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ