68b87f5b1db0af66257aafd287def427_JaffaCakes118 | Triage

Sharing

General

Target

68b87f5b1db0af66257aafd287def427_JaffaCakes118
Size

44KB
MD5

68b87f5b1db0af66257aafd287def427
SHA1

e5570ac971a415842033c1f5c49c90ca7a5cb582
SHA256

36ae8c9d0eefa84b52269dd518da3218fe7fedb3e9fec9809f5f2cc08e19f9c6
SHA512

7c222ad00c53670a23ee6fea8016bad6fb7d06893f29ddf795d8e8ea11c97b55a0d3585bbdf6dda962852274e46d82b3a86c8a98aeca45754fc42336b4e28eb5
SSDEEP

384:oZLlMVMUmTy1jR6pnyd/co3I+npgJjamu0v99qpVaDttvF0:RAYjM5Do3I+pgdru0gVKt0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68b87f5b1db0af66257aafd287def427_JaffaCakes118

Files

68b87f5b1db0af66257aafd287def427_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43499ac03e67ed6bdc0f1d5fe727ff75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
WinExec
GetSystemDirectoryA
GetVersionExA
SetFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
FindFirstFileA
CreateFileA
Sleep
CopyFileA
GetStartupInfoA
GetModuleHandleA
CloseHandle

advapi32

OpenSCManagerA
OpenServiceA
CreateServiceA
CloseServiceHandle

msvcrt

fwrite
__getmainargs
fgets
fputs
strtol
_exit
_XcptFilter
exit
_acmdln
fclose
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fopen
sprintf
_strlwr

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE