72e832d52b3607226b67245a4c2dc473_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72e832d52b3607226b67245a4c2dc473_JaffaCakes118
Size

6KB
MD5

72e832d52b3607226b67245a4c2dc473
SHA1

63d44b89737bf8b3331570513f93561a39b43ace
SHA256

c892028cca19365dfbd776f41f9508a53b6e2a5418c9ed8eb164c390e2dd981e
SHA512

e06a2aec8ede76b68110a896928046872d0b960e6b94db401ae5ad6449f5f81ce15ddc38826e765383ce987268a32f1e62efe7b7145aeef307fde4f0559d9972
SSDEEP

96:J2lmgFi/yMMk12mcMmpVPfpsxeTzyLgIM7CIQsOhpkCX:WhFi/yNkshMmpV3psxeTzyL1+CX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72e832d52b3607226b67245a4c2dc473_JaffaCakes118

Files

72e832d52b3607226b67245a4c2dc473_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93f4dfdd32728260330879baad3679ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ControlService
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle

kernel32

CloseHandle
CreateFileA
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetLastError
GetModuleHandleA
lstrlenA

user32

wsprintfA
CheckDlgButton
DialogBoxParamA
EnableWindow
EndDialog
GetDlgItem
GetDlgItemTextA
MessageBoxA
PostQuitMessage
SendMessageA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE