93b122a69e7c16f1503fa64ef41bd70a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93b122a69e7c16f1503fa64ef41bd70a_JaffaCakes118
Size

50KB
MD5

93b122a69e7c16f1503fa64ef41bd70a
SHA1

9e0705c497957a23768fd5ed3608f13c09cfe474
SHA256

175bfeab73f08d80d4de0bb6744da5649bc6e073f6a6c1db695cfa6d396eda08
SHA512

87eca21bd17c92e09fec251f8b460ed76a9f68b47097198e5fd37a9f9a0ba19adc62636bbd7d4d7dd67ba65c0324ed34fb9184e413c7e69ac5781072bacb49e6
SSDEEP

1536:L5YcyLnV8U+aUgUrI/MoIfJ0XjUtI7VlF:L5lyPTU4MBfJ0TFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93b122a69e7c16f1503fa64ef41bd70a_JaffaCakes118

Files

93b122a69e7c16f1503fa64ef41bd70a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

265c37b4f91e9e3d540df74f561dd620

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

IsWindow

gdi32

BitBlt

advapi32

SetServiceStatus

shell32

ShellExecuteA

msvcrt

atoi

ws2_32

recv

avicap32

capCreateCaptureWindowA

Exports

Exports

ServiceMain

Sections

.text
Size: 43KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hmtGKSz0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ