fd7fdcf63f2468326766ecfc1c5c9425_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd7fdcf63f2468326766ecfc1c5c9425_JaffaCakes118
Size

15KB
MD5

fd7fdcf63f2468326766ecfc1c5c9425
SHA1

063e6b552d93164c2281583aa1ab5aab31eef576
SHA256

23302eb3fa16dd997a9e90277c015754ddfafc96a16b1851e69a92f4b92b0f86
SHA512

54e1fba91f121b7d18ea522331a7dcd5e9a84e3db591705b7d3ac194d0d53aafd4a509bc7a62c28f8bf48f3638fb8be364ebe870efcfbafebf545f966c194184
SSDEEP

384:5vfLQtVGo+TF7Ye1fjxAZblLUAMkMbM03CtM:5vstAF7Ye1fj2RhUSST3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd7fdcf63f2468326766ecfc1c5c9425_JaffaCakes118

Files

fd7fdcf63f2468326766ecfc1c5c9425_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8eb804c02a18fe0cf1c52fed27ec7fe1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleHandleA
OpenThread
GetTickCount
ExitProcess
GetCurrentDirectoryA
CreateProcessA
GetFileSize
DeviceIoControl
Sleep
DeleteFileA
ReadFile
WriteFile
GlobalReAlloc
CreateFileA
LoadLibraryA
GetProcAddress
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetVersionExA
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
CopyFileA

user32

TranslateAcceleratorA
SetParent
GetDC
MessageBoxA

advapi32

RegDeleteKeyA
OpenProcessToken
GetTokenInformation
RegEnumKeyExW
OpenSCManagerA
QueryServiceStatusEx
ControlService
DeleteService
RegEnumValueA
OpenServiceA
CloseServiceHandle
RegLoadKeyA
CheckTokenMembership
AllocateAndInitializeSid
CreateServiceA
StartServiceA
RegCreateKeyExA
FreeSid

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE