d42c451f55ae6ffe9a86ddd10322df0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d42c451f55ae6ffe9a86ddd10322df0b_JaffaCakes118
Size

14KB
MD5

d42c451f55ae6ffe9a86ddd10322df0b
SHA1

6732d7c15ca7c9a53f143ce6df1ff8e545fb783c
SHA256

dc78b5ca7b500e4643557a8b156c1f1c9cf1e28a90c6130bd14c7c66a2e94975
SHA512

03fe886f638f060d87360173a1ccf735f20d718b41b68c1a983f9c95a9eced38cc2b406c6f22311d24f6141f12f935d29c27be75c411f6bc9b8ec43ca9fc8fc2
SSDEEP

192:BDnzEhLtzmU3z3tFQSV9GvlfNrhrAze88oTJ9WxmZQ0t/UJHv/12rbnmapON7o:BXJUztKSCpt+zusgwPnmas+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d42c451f55ae6ffe9a86ddd10322df0b_JaffaCakes118

Files

d42c451f55ae6ffe9a86ddd10322df0b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1ab6cfaeac675d387ce586019bb2a781

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
ExitProcess
GetLastError
FreeLibrary
GlobalFree
LoadLibraryExA
WriteFile
GetProcAddress
GetModuleHandleA
lstrcatW
GetSystemDirectoryW
LoadLibraryA
DeleteFileA
GetWindowsDirectoryA
Sleep
DeviceIoControl
GetFileAttributesA
CreateToolhelp32Snapshot
Process32First
Process32Next
GlobalAlloc
CloseHandle

advapi32

StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
DeleteService
CreateServiceA

msvcrt

_strcmpi

Exports

Exports

RKTV

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ