8e3a39ec7cfd4191a223021b5816a59c_JaffaCakes118 | Triage

Sharing

General

Target

8e3a39ec7cfd4191a223021b5816a59c_JaffaCakes118
Size

16KB
MD5

8e3a39ec7cfd4191a223021b5816a59c
SHA1

04ad34fe74824f54f63562b1390e43ab5b639dc5
SHA256

e9f743170c2bab552e941cb0123db76c2b55a5dc7c1bc39b16bb9b2f6df75ee6
SHA512

671ae6ad8d97e2b7f857450a2639294a739a12a2d28a0b0d55d51b253b66c67e18f5dbfc82409c57cabaa3e366086202f68c9bab0d916733046b8ebf0e8242c3
SSDEEP

192:iAnQc+YC3K3anXP1oynkbu5i1AN3ZXXV2+o:pQcd3an/1qup2+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e3a39ec7cfd4191a223021b5816a59c_JaffaCakes118

Files

8e3a39ec7cfd4191a223021b5816a59c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3bbb2e7c1b3e0e7a8e56aaf610a58c84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
MoveFileA
GetTempFileNameA
GetTempPathA
DeleteFileA
LocalFree
LocalAlloc
Sleep
CopyFileA
CreateFileA
WriteFile
CloseHandle
MultiByteToWideChar
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

advapi32

CloseServiceHandle
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
StartServiceA
QueryServiceConfigA
ChangeServiceConfigA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
??2@YAPAXI@Z

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE