a8c6ba2439ac73988316f888610175f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8c6ba2439ac73988316f888610175f2_JaffaCakes118
Size

8KB
MD5

a8c6ba2439ac73988316f888610175f2
SHA1

6210519a240a274cc64dd4a70db1b31eb7517578
SHA256

bc097d6be5871462e30821003327a7097ed6a1ac0a1518f37938d612bd5a880e
SHA512

ea27bc05f69889163a3b2675894d811115be8db65bda660e2c196b7784c91b7772db9a8ea895d5c6a500ae24d0e5f5d402a110e6a838280c59d645de3e12ca0f
SSDEEP

96:tRhUkd3Gf5Aesj1HiWD4AnBq3JJVQa7NObQ0wdZSbrQDgFgpKXGendTiaxjII:tQnPGliWyJJV4Q1S/SaxcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c6ba2439ac73988316f888610175f2_JaffaCakes118

Files

a8c6ba2439ac73988316f888610175f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc2859e2e3a263ee3e493b0520f28d16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetCommandLineA
SetFileAttributesA
DeleteFileA
Sleep
CreateProcessA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
SetCurrentDirectoryA
lstrcatA
GetSystemTime
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
CloseHandle
GetFileSize
CreateFileA
WriteFile
GetLocalTime
lstrlenA
SetFilePointer
ExitProcess
GetModuleHandleA
GetStartupInfoA
lstrcmpiA

user32

wsprintfA

advapi32

RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
CreateServiceA
CloseServiceHandle
ChangeServiceConfigA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE