ad2ffd7bf4c4bf8aac340b4cab5462db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad2ffd7bf4c4bf8aac340b4cab5462db_JaffaCakes118
Size

46KB
MD5

ad2ffd7bf4c4bf8aac340b4cab5462db
SHA1

95e5db97b55b6374f9ca28ffc1818cde87d3a7f7
SHA256

09a62e4b66c20c8d2199c6f70eeac664b28070d78c2a0789a3e79b3742191d84
SHA512

0b0b4e35f9a53faaa03884dbeb4f4cd6b8cacd2248342bc74c069b149b7fddd300af60e625e33b5fb9cb952c5f0e08b88b87b5c8cad9ef79a42ccdd12893efa3
SSDEEP

768:YoOVn19an/eYxuzpjqBr7lbkBIxxF1J9mPBxWUDpEz95V0rIoYp:Yl82ku4XlgixxHJ98Io7Yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad2ffd7bf4c4bf8aac340b4cab5462db_JaffaCakes118

Files

ad2ffd7bf4c4bf8aac340b4cab5462db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc2859e2e3a263ee3e493b0520f28d16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetCommandLineA
SetFileAttributesA
DeleteFileA
Sleep
CreateProcessA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
SetCurrentDirectoryA
lstrcatA
GetSystemTime
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
CloseHandle
GetFileSize
CreateFileA
WriteFile
GetLocalTime
lstrlenA
SetFilePointer
ExitProcess
GetModuleHandleA
GetStartupInfoA
lstrcmpiA

user32

wsprintfA

advapi32

RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
CreateServiceA
CloseServiceHandle
ChangeServiceConfigA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ