dc1718e7a7e343022f37e0b6eb863f50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc1718e7a7e343022f37e0b6eb863f50_JaffaCakes118
Size

16KB
MD5

dc1718e7a7e343022f37e0b6eb863f50
SHA1

821d424ed5098f9b8d4220275f6ecf0135e71767
SHA256

a87d3896ec462163190c55028e53ee2e27ada4c583d220e06d12b641dae167bc
SHA512

61d8873a58ac9a1c2b4b4438912ec9c596019a1c5eec8f1ffa037862d9bd542af8292f86dd884403221247d62a90901803ad3adc1a8b9a3bf5ec328f0d9777d9
SSDEEP

192:tQ+T8B4cULET6fYgggAzsX7Rj2gZAoWcT5A1Sj/+Vg8Og:TTi4FLETMYYAzKlA/ctAUj/qag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc1718e7a7e343022f37e0b6eb863f50_JaffaCakes118

Files

dc1718e7a7e343022f37e0b6eb863f50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b4dc34d63bd942681c3b69e179c1636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SizeofResource
CreateFileA
LoadResource
FindResourceA
CloseHandle
GetFileSize
SetFileAttributesA
lstrcatA
GetSystemDirectoryA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetVersion
ReadFile
GetModuleHandleA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcessHeap

advapi32

OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
StartServiceA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ