d1aa856f02d5ebedd33a9189e53516b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1aa856f02d5ebedd33a9189e53516b6_JaffaCakes118
Size

60KB
MD5

d1aa856f02d5ebedd33a9189e53516b6
SHA1

1df3e86e2d1f1a32c1ef8a4fdb018d5ee5cd9240
SHA256

155d68df318c682773f7b461c3898342887f88a1c5e7696a5edacbec278e1245
SHA512

76b9b9caed1ce54049f52f996a4493da71b68aff0af6b5818500c742ee20dfa544e08ae34982033ad1e48dbaea47c9c33029b35c1e59bff0262bd4ae85a49e5b
SSDEEP

768:G2VBmIOWFnToIf1ceRiL2HQaZ6JgsRlZoviJoIEg5qVOUEnl:pDmIOWFnToIfdMkhZ6/RlZm1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1aa856f02d5ebedd33a9189e53516b6_JaffaCakes118

Files

d1aa856f02d5ebedd33a9189e53516b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc51a774d299a8a9d8d8cf991d87b2e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemDirectoryA
DeleteFileA
CreateFileA
WriteFile
RtlUnwind

user32

wsprintfA

advapi32

CloseServiceHandle
DeleteService
OpenSCManagerA
CreateServiceA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
StartServiceA
OpenServiceA
ControlService

Sections

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ