dc9ad0cc009a1deb492b9e0919d20833_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc9ad0cc009a1deb492b9e0919d20833_JaffaCakes118
Size

9KB
MD5

dc9ad0cc009a1deb492b9e0919d20833
SHA1

466cc7164138cc076e5a1b52e12dc74be2ea2618
SHA256

490920600076b9c39a56e972ff7d1e66aed2137f9a2b6db7169b8b4d19a07dbf
SHA512

6839428bb8b0e2c35bf375922fa1937e44e277d4aec98fc965d14d44cf7a17bbc3134d4cd04764da936e92dcee5b68ae6779c1a4cbd58bbad5cc1ee45ef57af2
SSDEEP

96:VQs/Tb6wUmKSps0Or2FswoVFHoGoxq2EpJar9x/EW48CMQWvBZqo2:2qmus0OC21BoGo7EpgrncW48CMQWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc9ad0cc009a1deb492b9e0919d20833_JaffaCakes118

Files

dc9ad0cc009a1deb492b9e0919d20833_JaffaCakes118
.dll windows:4 windows x86 arch:x86

6e934e6b8040ebafe3e3c9248e764591

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
LoadLibraryA
RtlZeroMemory
GetTempFileNameA
WinExec
lstrcatA
lstrcpyA
GetProcAddress
GetPrivateProfileStringA
GetPrivateProfileIntA
GetComputerNameA
DeleteFileA
Sleep
CreateThread

advapi32

RegisterServiceCtrlHandlerA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
SetServiceStatus

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

user32

wsprintfA

Exports

Exports

ServiceMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ