ad6d0eaff946cc1fcaf6e99f990d6641_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad6d0eaff946cc1fcaf6e99f990d6641_JaffaCakes118
Size

7KB
MD5

ad6d0eaff946cc1fcaf6e99f990d6641
SHA1

d24877c0287e42d68d8a207e7e82e5db3a1506a0
SHA256

d485c6c783e5d572a49efcc8739c43a054a5e47de43d400560dcb4860aa55f53
SHA512

4dcdb786db6ecbadacbd617b8481dd49ea5174cb062e081f8cedfe5149ebe3182c2b7cceb8930b561c689d1c72f98cbb3dc2e7487ed231c061fd7bae45644968
SSDEEP

96:FhQCGwhg9YztcvGUS4qhCu+QpsZZK3PkrbN7MJcc4eTuo+m:slwhYyqmpV/PccFS5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad6d0eaff946cc1fcaf6e99f990d6641_JaffaCakes118

Files

ad6d0eaff946cc1fcaf6e99f990d6641_JaffaCakes118
.exe windows:4 windows x86 arch:x86

890ec821b26470d0b7071afa8c73d73f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

GetModuleFileNameA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
LoadLibraryA
ReadFile
RtlZeroMemory
SetFilePointer
GetFileSize
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
GetCommandLineA
FindClose
FindFirstFileA
FreeLibrary
ExitProcess
DeleteFileA
CreateProcessA
CreateFileA
CloseHandle
Sleep

advapi32

StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
StartServiceA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE