0af9382c5bc06a381fdde18916dbaf60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0af9382c5bc06a381fdde18916dbaf60_JaffaCakes118
Size

19KB
MD5

0af9382c5bc06a381fdde18916dbaf60
SHA1

bc7446c47059558527f78d1b555a40172508ab52
SHA256

3efd7b1c0f581736fa6f79dc461cb6f1d60cba90745ef2767c1f1bf69f56b880
SHA512

78c967e181a76f11d323ead30016ff892c3e6a78e0be98ac78bcc0de9c1f34542d36df425291d2c5b4dbe6a94ac1ff6ec32b24d1e0de815c2e9b6970b11cf34e
SSDEEP

384:Fit0Yi7rw5xLIHM8A4zcUcWJ2PD74vDETFAg1jGj3Y0fru89R4yl3Wdn:ljrisAgJW8LETFdAY0frT9iOWZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0af9382c5bc06a381fdde18916dbaf60_JaffaCakes118

Files

0af9382c5bc06a381fdde18916dbaf60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

336d798776fdd9fa820c6a3fe5057ed4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
lstrlenA
CreateFileA
lstrcatA
CreateToolhelp32Snapshot
GetTempPathA
GetModuleFileNameA
ReadFile
SetFilePointer
GlobalAlloc
GetFileSize
Sleep
GetCurrentThreadId
Process32First
GetCurrentProcessId
GetTickCount
Process32Next

user32

PeekMessageA
wsprintfA
PostThreadMessageA

advapi32

OpenServiceA
OpenSCManagerA
ControlService

Sections

.text
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 976B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ