85458841dbe53ace1cb2845ce27d9fa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85458841dbe53ace1cb2845ce27d9fa1_JaffaCakes118
Size

46KB
MD5

85458841dbe53ace1cb2845ce27d9fa1
SHA1

b581ac025fe9c176af01f08d50a18ea570ef9e6c
SHA256

f6915bafe2f496e5bec9d19f73a3afebca61bf4908872e487468cc342d501599
SHA512

2fbf4f32c9b50acbf4a552c0756c24a4b07077d1177e0a86a3b5db74bf2b7fea77dec6e93d4aa21694e4619fef04aeaa19a287c92bea717ab8a5dae0828508f7
SSDEEP

768:MRWEA1Qx7XHEy3Ng7SADjsdhZ6QsUakKrr9RV+AD5S3bJe9ja555LH1cN:vb1QxjkeNgxDjsd3Ls1H9RU4S3bIlMcN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85458841dbe53ace1cb2845ce27d9fa1_JaffaCakes118

Files

85458841dbe53ace1cb2845ce27d9fa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6bd25d39587f5dd6d189f6b1cc8d3565

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
CreateProcessA
Sleep
GetTempFileNameA
SetFileTime
GetTickCount
GetModuleFileNameA
GetLastError
DeleteFileA
MoveFileExA
DeviceIoControl
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetTempPathA
GetSystemDirectoryA

advapi32

DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
ControlService

msvcrt

strrchr
_strlwr
strlen
fclose
fwrite
fopen
sprintf
strcat
strncpy
fread
strcpy
memset
_stricmp
rand
srand
_snprintf

shlwapi

SHDeleteValueA
SHSetValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ