75c86727518cf36dd3be1f69827c1a09_JaffaCakes118 | Triage

Sharing

General

Target

75c86727518cf36dd3be1f69827c1a09_JaffaCakes118
Size

60KB
MD5

75c86727518cf36dd3be1f69827c1a09
SHA1

46b8d1e4d1b2a9fa9914902e0c0cd61ea1e40615
SHA256

743c3ffc37c84659b90b7328dc0a2214041f3efba318c86bd749225e734dd9f7
SHA512

507d590958ec8536c7c8328b2f74dcfd8f81952b201b0f4f5faefd12fdb1aab933dd33ed7c6d4e0e648f01aacf84495a185f9ebf726e28b673d7f7830d6e2890
SSDEEP

768:p2VHFIOWFnToIf1ceRiL2HQaZ6JgsRlZoviJoIEg5qVOUEnz:MJFIOWFnToIfdMkhZ6/RlZm1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75c86727518cf36dd3be1f69827c1a09_JaffaCakes118

Files

75c86727518cf36dd3be1f69827c1a09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc51a774d299a8a9d8d8cf991d87b2e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemDirectoryA
DeleteFileA
CreateFileA
WriteFile
RtlUnwind

user32

wsprintfA

advapi32

CloseServiceHandle
DeleteService
OpenSCManagerA
CreateServiceA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
StartServiceA
OpenServiceA
ControlService

Sections

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ