c07b5d931ce0c28ba9b90becc3374299_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c07b5d931ce0c28ba9b90becc3374299_JaffaCakes118
Size

88KB
MD5

c07b5d931ce0c28ba9b90becc3374299
SHA1

7b6254dfdc870eed787f0967708f7d4a29f01a9b
SHA256

f53a973f5e7f67080de7d41cd8ad3ae7bd1e15ce6477d0d3d8df9a4531c1de38
SHA512

d9fc6b0dc105377ef2373eebda4bc47bceb7b4129a565af3ce4b6df180b7cccf10f0a05c31c74caf1c7fe59b9b11bd008d9128f362f7967c60a2e43979df6079
SSDEEP

1536:8khHv77nocSLg1dT+ZQrxYg0Z0XGNcthATKCbkgEPWvhuvy:8kxjjocSLg1Agy0Xsc8VkvOJuvy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c07b5d931ce0c28ba9b90becc3374299_JaffaCakes118

Files

c07b5d931ce0c28ba9b90becc3374299_JaffaCakes118
.exe windows:4 windows x86 arch:x86

496d54a04e95ba0f0e176ebb402c89f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetCurrentProcessId
CreateProcessA
CreateFileA
GetModuleHandleA
GetModuleFileNameA
lstrcatA
CloseHandle
DeleteFileA
SetFilePointer
ReadFile
GetVersionExA
Sleep
CreateThread
WriteFile
GetLastError

advapi32

RegDeleteValueA
CreateServiceA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
StartServiceA
OpenServiceA
CloseServiceHandle
OpenSCManagerA
RegOpenKeyExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ