4cf9faa1be458badaf4107baf3b46aaf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cf9faa1be458badaf4107baf3b46aaf_JaffaCakes118
Size

44KB
MD5

4cf9faa1be458badaf4107baf3b46aaf
SHA1

0c03adf8e5c233f4c263449bea5a1ff09ddee911
SHA256

a2b6684b9deb0eaafe6d2472f5faaf94baa5db08c05dbaa8656b7b8db44ccf44
SHA512

c755cff308950b1da1de10ce8e952de90e62b5e87bb9d18396a69d95f860e7c0b39bf85e83214f091f89b3c85395ea94e07482f6e9dc8bfc51ed70c0d270782d
SSDEEP

768:wOGtM4UUGG3lpcN3sXugA2cZHtCnWgCcRkfctE7yE0XdPIpB0qEbfTZyZHfcN:wO74UUGWpcZkuB9Z8nWgCcmctwyXdPGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cf9faa1be458badaf4107baf3b46aaf_JaffaCakes118

Files

4cf9faa1be458badaf4107baf3b46aaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ba474b317a922ff5f00f71a547f99b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetTempPathA
GetTempFileNameA
GetSystemDirectoryA
DeleteFileA
DeviceIoControl
CloseHandle
CreateFileA
WinExec

advapi32

DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA

msvcrt

_snprintf
fclose
fwrite
fopen
sprintf
strncpy
strrchr
_stricmp
_strlwr

shlwapi

SHDeleteValueA
SHSetValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ