e0a38a8e0dd574dc58ce4163e8a0db82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0a38a8e0dd574dc58ce4163e8a0db82_JaffaCakes118
Size

12KB
MD5

e0a38a8e0dd574dc58ce4163e8a0db82
SHA1

795cf29cbf310bc31268708ed67f8864fdc1fbfa
SHA256

5d3e83e42abb054a6d7865f76e50fa86423dfe184e3ca0d5d398128b802df4d3
SHA512

b6b8c59ee0f2907b38f1d4b3e505ebdd45ba6b44311f1d064d01cff816504abd6cc4683a1e9e7b263580c4f9252955951e6b1ce2896a53b1db7f00867795c1af
SSDEEP

192:PX6broyN+qOR/5mDNDBXX6vew/KyiZi1Q0ow/XNXp68nWPGB+:E0JTx8DNdX6WmiYcw/d/nWP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0a38a8e0dd574dc58ce4163e8a0db82_JaffaCakes118

Files

e0a38a8e0dd574dc58ce4163e8a0db82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

955852278bc0bd0897e6c4a7337cf508

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
StartServiceA

kernel32

GlobalFree
GetProcAddress
LoadLibraryA
GetCommandLineA
GlobalAlloc
CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
GetWindowsDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
WritePrivateProfileStringA
GetModuleFileNameA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ