3da555d2563fa40987da71c2d650341f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3da555d2563fa40987da71c2d650341f_JaffaCakes118
Size

186KB
MD5

3da555d2563fa40987da71c2d650341f
SHA1

13edd210f58e27be7f12479bc4131a9a05873687
SHA256

c3f186eb0a57f0b1faa52cad14f6bc748bfede9a2c7da1f31cb23fe2f370049f
SHA512

102ac2a1d204425ac008cdc3afa3b7b1565f86421837de367683b4f1429b5de2f4c2779ce5145ea578c94a2de3a677d578f47b58f7effce6644b6aa27fae37ca
SSDEEP

3072:s5KRVsu8A5XzAcrw8yUXxYxc8HPxqHn24B+HjMlBu/+ec9whbDV7SbT:7su8A5XEcryHIW4BgAnMKAl7Sb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da555d2563fa40987da71c2d650341f_JaffaCakes118

Files

3da555d2563fa40987da71c2d650341f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2d150ae6e41b592bc554846fa2eb37a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
SizeofResource
Sleep
CreateDirectoryA
LockResource
FreeResource
CreateFileA
WriteFile
CloseHandle
GetModuleFileNameA
ExitProcess
GetEnvironmentVariableA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

advapi32

CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService
ChangeServiceConfigA
ChangeServiceConfig2A
StartServiceA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sprintf
_exit

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ