0918e233bbd2c261dcda5fe19e9479d8_JaffaCakes118 | Triage

Sharing

General

Target

0918e233bbd2c261dcda5fe19e9479d8_JaffaCakes118
Size

16KB
MD5

0918e233bbd2c261dcda5fe19e9479d8
SHA1

27b661ea25919f823c9ff4f5208459b13b4854e0
SHA256

b738696eeeb2c541962a03b9eccd5d616c378a1da876548a51ed7bc9d5f1609e
SHA512

5ee81e993e8bd202d686f8a6a5cd9f4f0e2dcf297877418aaa9f41ab1f0c1aae2e7a36ace5cccfa3cc6dfbf075fbf0cc503d7c33357fb33244b0dfa849d32066
SSDEEP

48:q/BkJeLYDQWLyzrXH7luwOgdSsI1Byqa7s0HhX6NNA3gxT6NnRIAHWnzEM0:qBkUHzvlzOoIzy37seX6NNA3gwNmWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0918e233bbd2c261dcda5fe19e9479d8_JaffaCakes118

Files

0918e233bbd2c261dcda5fe19e9479d8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

813089cfc79726be07ab586ca105b203

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrcatA
GetSystemDirectoryA

advapi32

DeleteService
ControlService
OpenSCManagerA
StartServiceA
OpenServiceA
CloseServiceHandle
CreateServiceA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 354B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ