2e1034cd3aa42060ff31bd3e35239400_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1034cd3aa42060ff31bd3e35239400_JaffaCakes118
Size

138KB
MD5

2e1034cd3aa42060ff31bd3e35239400
SHA1

193cb523f18cb12e3c9396a606d1adc0d48e3746
SHA256

af460ad8afcb8faadc5f2dad1b6b6dfa9aa38ea1d91883773b41da6023f654ac
SHA512

cffb1317ba05e65c1e4764f7489be829336d5588b5ed4d53b33469160490c44774df35a42e9bac6b7161fb1ae7c62ebb45e50090f8304994312248a35a4e726d
SSDEEP

3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5R:3JqxDbc0tF1fIdOBUS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e1034cd3aa42060ff31bd3e35239400_JaffaCakes118

Files

2e1034cd3aa42060ff31bd3e35239400_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71f458a3392b1762de738f2a837c2b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE