a86b926d7f480136b1777b1e0378842c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a86b926d7f480136b1777b1e0378842c_JaffaCakes118
Size

141KB
MD5

a86b926d7f480136b1777b1e0378842c
SHA1

23a4a7127314a6ada4112fcd427fe0f504bdfd46
SHA256

a305c5a3cef4b5d3b7150d792519ef3da765b6fcbaeed11c3633a5fc128c446a
SHA512

0657477a2a801c49bdec93290ecb512b5834d5fa4202f4eb3971fc46c9e877b6e681f5f02d75537b2f8ea6f09864260a3707ed8c03ecd0d0b9516dfd33002b0e
SSDEEP

3072:DyXWHNnjKfzXD7pXi+oHn/X4WwCtRQKsH62dnHL:DYoNnjK7z7q/vnhs1dnr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a86b926d7f480136b1777b1e0378842c_JaffaCakes118

Files

a86b926d7f480136b1777b1e0378842c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7838ebd0b44918c38e8119626e7c981a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
WaitForSingleObject
SizeofResource
CreateEventA
LoadResource
GetModuleHandleA
CreateFileA
WriteFile
Sleep
LockResource
FreeResource
CloseHandle
LoadLibraryA
GetTickCount
GetProcAddress
GetStartupInfoA

user32

LoadIconA
RegisterClassA
LoadCursorA

gdi32

GetStockObject

advapi32

StartServiceA
RegOpenKeyA
RegSetValueExA
RegCloseKey
ControlService
OpenSCManagerA
RegCreateKeyExA

msvcrt

sprintf
rand
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ