09f0aba0fc3f80d27b9c020d2002d62d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09f0aba0fc3f80d27b9c020d2002d62d_JaffaCakes118
Size

140KB
MD5

09f0aba0fc3f80d27b9c020d2002d62d
SHA1

9997770cf76eaecc49b41015e41be091b846c6bd
SHA256

78c0976893e91a979549d5f6c29c6c534e19447dba8b0f8ccf9dec32535ed7ae
SHA512

8de326d1668eb7e12c5a884717be8290e6e3d8bf973ac35b1c7f078e2add024effa2fb72c3a395bb282a1b3222105f282563d6d3c67c41f0387754356c9f4afa
SSDEEP

3072:mmsKKwwBk29dh7IRtvi6EHEKKgSDgTI2uhs7uRIfg:z3Kni29dORE6EWgJ6nRIfg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09f0aba0fc3f80d27b9c020d2002d62d_JaffaCakes118

Files

09f0aba0fc3f80d27b9c020d2002d62d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69d3d0a2b864eff2c9a05213a571a3c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
OpenEventA
CreateFileA
ExitProcess
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA
HeapFree

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE