6039ce375cfed57471fdf1e0dbb5bcae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6039ce375cfed57471fdf1e0dbb5bcae_JaffaCakes118
Size

27KB
MD5

6039ce375cfed57471fdf1e0dbb5bcae
SHA1

1157085d623b9a87757dc3f7d3716f6574e5c82a
SHA256

d87ba8fec081e78bfc514f163b8b7209375d57c3b8ec4ba962d346d25ba11c22
SHA512

dfcd15f2cf3131ad4e1d961bbb22c4cbc8f1e2cfc33856f1508bfca9cae18d82b40fce412f88801ecbdb8eb28d6a925f9270e609c30328e54c0c7782cf227315
SSDEEP

768:x3Vgr0cOLPSuiPNa/H10oXDUswpcZhA/kBcG:m0vL6Ha/HtDUNcch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6039ce375cfed57471fdf1e0dbb5bcae_JaffaCakes118

Files

6039ce375cfed57471fdf1e0dbb5bcae_JaffaCakes118
.exe windows:3 windows x86 arch:x86

de95250cf53a971056951e748a573b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenSCManagerA
CreateServiceA
DeleteService
OpenServiceA
StartServiceA
ControlService
CloseServiceHandle

kernel32

GetLastError
CloseHandle
CreateFileA
GetVersion
GetEnvironmentStrings
GetCommandLineA
GetCurrentDirectoryA
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetFileType
GetStartupInfoA
GetProcessHeap
WriteFile
HeapAlloc
HeapFree
WideCharToMultiByte
FlushFileBuffers
SetFilePointer
SetStdHandle

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ