5f4074cc436b5fc893fd036bcb34e5d0_JaffaCakes118 | Triage

Sharing

General

Target

5f4074cc436b5fc893fd036bcb34e5d0_JaffaCakes118
Size

916KB
MD5

5f4074cc436b5fc893fd036bcb34e5d0
SHA1

036abca84438d68ab0410ce07bec601fb8eb58c2
SHA256

94e0e980767d0ced0bbb2d3028880c3ca7562f44a24f171a529138448c0a9da8
SHA512

9ddebb820785bf7fd8e9446f684acf13dd15329eb42befb530f9cdb614d83ff718382ea7ce9a0c43cbe40bc52a528703b395f3f8b27d1d5dc31af710b271d8db
SSDEEP

12288:HgFZR2yV0w6NfEzN9ceXldisMX2rKzVTdPSCMQZltGv3R+BzzQNw8nEg:m16NfEx9Tl62rKzVTqW4+fT89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f4074cc436b5fc893fd036bcb34e5d0_JaffaCakes118

Files

5f4074cc436b5fc893fd036bcb34e5d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5404ba3cdb5322e5827d0cdbe72d5863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

user32

wsprintfA

shlwapi

StrStrA
StrChrA

advapi32

OpenServiceA
CloseServiceHandle
DeleteService
OpenSCManagerA

msvcrt

exit
_XcptFilter
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_EH_prolog
__CxxFrameHandler
memcpy
time
srand
rand
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_acmdln

kernel32

lstrcpyA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
ReadFile
SetFilePointer
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WriteFile
GetSystemDirectoryA
lstrcatA
CloseHandle
GetFileTime
SetFileTime
lstrlenA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE