7361ac55fde8ee135d232535ea5abcf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7361ac55fde8ee135d232535ea5abcf7_JaffaCakes118
Size

24KB
MD5

7361ac55fde8ee135d232535ea5abcf7
SHA1

e057481e996a85a14eb5b56acf9f2034a298a53e
SHA256

5c3f778b5f52fe156152132bc6d34c1341a011a60fdb61a6e3f949768afba4c5
SHA512

fe9905f41a31f9165d571701656ed892ab7a531b443c3d70a4d4a57244f50f01bd6614ddda26f65b64d7ef96a5d4592b2488d7996be2f621189a229848a52bc3
SSDEEP

192:w1L8yPvSOqFgOb0SLNollFyb5NUoynTWL04ZqW:w1L8QvSOqFnrL2Fyb5aVWL5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7361ac55fde8ee135d232535ea5abcf7_JaffaCakes118

Files

7361ac55fde8ee135d232535ea5abcf7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90155ed924794a63cffcad2a5d49d7b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
DeleteService
RegCloseKey
OpenServiceA
OpenSCManagerA
QueryServiceStatus
ControlService

user32

MessageBoxA

msvcrt

__setusermatherr
_adjust_fdiv
_initterm
__set_app_type
_acmdln
printf
_except_handler3
_controlfp
fgets
exit
fopen
strchr
fclose
atoi
__p__commode
sprintf
__p__fmode
_exit
_XcptFilter
__getmainargs
_stricmp

kernel32

GetStartupInfoA
GetVersionExA
Sleep
LoadLibraryA
GetTickCount
FreeLibrary
OpenProcess
GetProcAddress
CreateProcessA
GetLastError
GetModuleHandleA
TerminateProcess
CloseHandle

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE