d36c00d096b458b5e7b4d23274eb191c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d36c00d096b458b5e7b4d23274eb191c_JaffaCakes118
Size

11KB
MD5

d36c00d096b458b5e7b4d23274eb191c
SHA1

db61b8660c82ed74daf247d646255ed40494dc29
SHA256

1b372a6bfdf7a8b5d199b149b32c8d7ddf16f9f6a87cfdc1505de8152e6e5b94
SHA512

9a6322afd5c0c9df9eabf6914fb087eb2b7dd85012f42361517e2cd8f9461f5171c406cae33a4bc5bdc9c5c1bd677fc655260ada3c8de2dd9bf7618ecd560f89
SSDEEP

192:ANcl8QsLrQXq2rVgUIpzso1DVIOGDscCCJ:AqavHF2rVgU2RMOnk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d36c00d096b458b5e7b4d23274eb191c_JaffaCakes118

Files

d36c00d096b458b5e7b4d23274eb191c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66458ba599bb92a07aa00a1b1abfd9c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
LoadLibraryA
GetPrivateProfileStringA
ExitProcess
OutputDebugStringA
WaitForSingleObject
ResetEvent
CreateEventA
OpenEventA
GetWindowsDirectoryA
GetProcAddress
GetSystemDirectoryA
Sleep
GetTempPathA
GetTempFileNameA
DeleteFileA
WinExec

advapi32

StartServiceA
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus

msvcrt

_stricmp

wininet

DeleteUrlCacheEntry

shlwapi

PathAppendA
SHDeleteKeyA

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ