118da7f08c5a0ce686e5a9f1bf023a28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118da7f08c5a0ce686e5a9f1bf023a28_JaffaCakes118
Size

27KB
MD5

118da7f08c5a0ce686e5a9f1bf023a28
SHA1

33529731e1a7c7c145aaf6a641950a3d1cba5244
SHA256

78c67dc1ac40a7a2439433d1e1d33ea268a696dbc8a4a2b3399bb017ed3ca142
SHA512

a49c321f15f31e50701daf4cf8867925fd21c01a13d3c36f1197372246e61b0b61739c6e9064fa6ab102e9adcf4ef4c4931a83d97108ac27e19a255a7001b269
SSDEEP

768:x3Vgr0cOLPSuiPNaR0oXDUswpcZhA/kBcG:m0vL6HaZDUNcch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
118da7f08c5a0ce686e5a9f1bf023a28_JaffaCakes118

Files

118da7f08c5a0ce686e5a9f1bf023a28_JaffaCakes118
.exe windows:3 windows x86 arch:x86

de95250cf53a971056951e748a573b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenSCManagerA
CreateServiceA
DeleteService
OpenServiceA
StartServiceA
ControlService
CloseServiceHandle

kernel32

GetLastError
CloseHandle
CreateFileA
GetVersion
GetEnvironmentStrings
GetCommandLineA
GetCurrentDirectoryA
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetFileType
GetStartupInfoA
GetProcessHeap
WriteFile
HeapAlloc
HeapFree
WideCharToMultiByte
FlushFileBuffers
SetFilePointer
SetStdHandle

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ