ea15bb5654493ded51bb9e959de8c85e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea15bb5654493ded51bb9e959de8c85e_JaffaCakes118
Size

11KB
MD5

ea15bb5654493ded51bb9e959de8c85e
SHA1

67b3d6d00fabd9130eaebcddb6b510e88b397846
SHA256

be7dc47d9fc7c4cae3539325ddd00314056cefb076a27fedc1ed6d6f480db60a
SHA512

339dc7e72b39c97c14d258b7dcf899c34938537bc47ccf96b7c4f81a84db099fab66ec8f7f3a1e2cb35b2a1694b41ccd9e3ab36c7ac62586a1fecd2ab0869d85
SSDEEP

192:KXBFro7Nu+qOOeIfpemip5RJKTZ70bqYuKAOWERxOWvqYgXggS4PdT+:Y0xRTbApemUQl70GObMJhS4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea15bb5654493ded51bb9e959de8c85e_JaffaCakes118

Files

ea15bb5654493ded51bb9e959de8c85e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

955852278bc0bd0897e6c4a7337cf508

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
StartServiceA

kernel32

GlobalFree
GetProcAddress
LoadLibraryA
GetCommandLineA
GlobalAlloc
CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
GetWindowsDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
WritePrivateProfileStringA
GetModuleFileNameA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ