a5f870af568a6f39648f53be0ac66d18_JaffaCakes118 | Triage

Sharing

General

Target

a5f870af568a6f39648f53be0ac66d18_JaffaCakes118
Size

139KB
MD5

a5f870af568a6f39648f53be0ac66d18
SHA1

08fdc3c36ef8f569b2607a9da25928997a23fd85
SHA256

2943b60e43774056061c4d056664756e0d1ebd3398da52ecdcf584642d0aff88
SHA512

9022f43122ecf46f3bd80889e2b79caf9d093b27178d27110d48e94d1ecc64e79a9dc6f5a739f59907815375710d5d5ed9d3343a7a00268862561c7f47af4317
SSDEEP

3072:Wl8oqqj/tiR1YOWDYsy5L/rNDmGTVo0qdTBfVly+KWEvz5:WlC6iPdZmGTudTBtly+KWEvl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5f870af568a6f39648f53be0ac66d18_JaffaCakes118

Files

a5f870af568a6f39648f53be0ac66d18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce7b2ba5ca6f0a7963632d795181a2da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
HeapFree
lstrlenA
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
GetSystemTimeAsFileTime
CloseHandle

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE