c10929519652f0c252b39204f52c5549_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c10929519652f0c252b39204f52c5549_JaffaCakes118
Size

156KB
MD5

c10929519652f0c252b39204f52c5549
SHA1

2b30b2dac3caab1f0e80029f5b50a4459f87f8fc
SHA256

a235d9508d74c94c69657895dd4220bbf811e7520ffa509da8722c3318ec64a8
SHA512

7335b0ecab32d34d5cc1c0a86859cfa4bb259648e004920a772f7d281dcc8761a4d0ffa9f76247d4ff595f57831cb900280c0df02059a08c0c86ca203c7d3c0f
SSDEEP

3072:LQIDF8Jk5cCyJzl79Mi/m5UB5ZrDLhUY9MQ/UlZ4x2v448lCx1Eu:nHcCCliV5UdNUY93OOcA78Mu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c10929519652f0c252b39204f52c5549_JaffaCakes118

Files

c10929519652f0c252b39204f52c5549_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6138bdb74abc795b0a998eb00778d570

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_except_handler3
_c_exit

advapi32

ControlService
OpenServiceW
OpenSCManagerW
NotifyBootConfigStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetServiceStatus

kernel32

SetEvent
ExitThread
WaitForSingleObject
ExitProcess
CreateEventA
GetLastError
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wlocgoz
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE