dd8437c4671c95ca3bbf339a761db315_JaffaCakes118 | Triage

Sharing

General

Target

dd8437c4671c95ca3bbf339a761db315_JaffaCakes118
Size

132KB
MD5

dd8437c4671c95ca3bbf339a761db315
SHA1

0797d461dab12392635395f5cc4289e6d7faa9c6
SHA256

854c1f07a26f05f7f3d3069238027fd257394422e657142ce3ab7a8eb301bee8
SHA512

b90d24d6718593ac0b7894ed0e82d4b4ffde694b6bb751fe6ffa5a3d03922884e05f9e7a07aaf0f2ca36ba64e0aab7fdb28e71f750bfba00fa7d71420ca56d85
SSDEEP

1536:Y+RkC3kulQvEWkONrP4k0I+aU92GwaypWtt8clcCZ4Iou8XObF+TIe5+I5IefF:YEEDP4kwa0ymgCJ7n+TIe5+I5Ie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd8437c4671c95ca3bbf339a761db315_JaffaCakes118

Files

dd8437c4671c95ca3bbf339a761db315_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab5edd83986db24702ee9dcc4178a9a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetTickCount
CloseHandle
WriteFile
SetFilePointer
GetLastError
CreateFileW
GetProcAddress
LoadLibraryA

Exports

Exports

ServiceMain

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ