10260bf8d9922436d149a9fe619d5f30_JaffaCakes118 | Triage

Sharing

General

Target

10260bf8d9922436d149a9fe619d5f30_JaffaCakes118
Size

153KB
MD5

10260bf8d9922436d149a9fe619d5f30
SHA1

dc9a5d2846846979c895525576d2ac6e1385872b
SHA256

8fe30d4e02580e505defba5c75d2d090c28e39b6e3132ddb97b75653d631fe37
SHA512

49457f62a4588b49fb2c202b684cdd790ad9e5bd1ff6f88495d4f019cf1c6fceb431cc870fd4ae36a336b821fd693c793b56dd493ff8a04410d43a502749c5cb
SSDEEP

3072:EDjsDuYR47dkiydD8Yr9+XDWJc8WjD7cNepIo0v2G0zudJ:E91IDdr9+Xb8gD+P0zuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10260bf8d9922436d149a9fe619d5f30_JaffaCakes118

Files

10260bf8d9922436d149a9fe619d5f30_JaffaCakes118
.exe windows:1 windows x86 arch:x86

955d8abf845929217e82ab23298fe2b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind
GetLastError
LocalFree
LocalAlloc

crtdll

__GetMainArgs
exit
raise
signal

advapi32

ChangeServiceConfig2W
CloseServiceHandle
OpenServiceW
OpenSCManagerW
DeleteService

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 828B - Virtual size: 828B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 348B - Virtual size: 348B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE