7662b7b35ffaa68fc3466bc994735f55_JaffaCakes118 | Triage

Sharing

General

Target

7662b7b35ffaa68fc3466bc994735f55_JaffaCakes118
Size

68KB
MD5

7662b7b35ffaa68fc3466bc994735f55
SHA1

4f027a27888b90373d3554a23ead582382a45586
SHA256

84208bcd4ce35c4f20a500e28eb1fd8cf987b8b7cb1dcc5963c163dc15d0892f
SHA512

2e73c975955dcacad6c8c0735b948b3688ac1d711f91910bab8096b70fed7aa3079d600818291c092a105b32403054124439f1289089f9365b5bab7d72c88f4d
SSDEEP

768:CdYtcuElqlgj5ID+dXMxPnpA86oni3F4SpHiL6oGLzW9K9E28q9LRNVr/Os7JDpP:CqaC+dXEI46oGLzW9KWq9NKRgV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7662b7b35ffaa68fc3466bc994735f55_JaffaCakes118

Files

7662b7b35ffaa68fc3466bc994735f55_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4496a9dcf554357683220eb154c562ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileA
ExpandEnvironmentStringsA
GetModuleFileNameA
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetFileAttributesA
CloseHandle
CreateFileA
SetFileTime
WriteFile
ReadFile
SetFilePointer
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryA

user32

wsprintfA

msvcrt

_snprintf
memset
memcpy
??2@YAPAXI@Z
free
malloc
calloc
strcmp
strcat
strcpy
_mbsstr
_initterm
_adjust_fdiv

Exports

Exports

ServiceMain

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ