b27b90c52cc921d95b7bdd5a216814c7_JaffaCakes118 | Triage

Sharing

General

Target

b27b90c52cc921d95b7bdd5a216814c7_JaffaCakes118
Size

12KB
MD5

b27b90c52cc921d95b7bdd5a216814c7
SHA1

fab8346992c41a2c8de2ada5fd58faa825427c48
SHA256

aefc9033ffcd095026bae8b38fa1ef8c26c4cab325e687b5bd285eadc04d168a
SHA512

4a8076d50c89614d547e5dbe92b622f5be80be473b55577d50b86871741dc8b7a7b2de3242d9d1c85cab610f8842aa3d585909c1c6a30abd6f00d31aacde6191
SSDEEP

384:l9wTIREZduEZvpZ1IgnTIZRC6HauhEeP:l9wUREZduEZvF0C8aeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b27b90c52cc921d95b7bdd5a216814c7_JaffaCakes118

Files

b27b90c52cc921d95b7bdd5a216814c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

955852278bc0bd0897e6c4a7337cf508

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
StartServiceA

kernel32

GlobalFree
GetProcAddress
LoadLibraryA
GetCommandLineA
GlobalAlloc
CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
GetWindowsDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
WritePrivateProfileStringA
GetModuleFileNameA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ