aefe844a0ee77f1c11a2a61751b2804a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aefe844a0ee77f1c11a2a61751b2804a_JaffaCakes118
Size

2KB
MD5

aefe844a0ee77f1c11a2a61751b2804a
SHA1

47b2da62a5fb52266f5d72f63e688f0dc6371e2d
SHA256

78ea92c5c57a2fdffc76694b7b0b7834c7f577d8adcd261336fb105c8601c082
SHA512

b93f98b8f4c49fd7f5d7e19946da27223eeeac4f7cd42fffc5b7ef3c13346c71b44c0abd50acdf621d6fc8cfaf48fd55bd5e38857701f8821b78861aa0571da6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aefe844a0ee77f1c11a2a61751b2804a_JaffaCakes118

Files

aefe844a0ee77f1c11a2a61751b2804a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

569ac9b03efc3968fe034da92126952f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetStartupInfoA
ExitProcess
lstrcatA
RtlZeroMemory
CreateProcessA

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA

Sections

.text
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE