3c413fc4b514b1e537f6ef00c039ceda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c413fc4b514b1e537f6ef00c039ceda_JaffaCakes118
Size

140KB
MD5

3c413fc4b514b1e537f6ef00c039ceda
SHA1

30564f446e8de8e0e390c12d5d3e1d08312f8a13
SHA256

e440bbdcdc76cf48bc0d0a03b355a09b8d6075a9301be8e14cf761fa8c08fe87
SHA512

e13d86932fa402934ddeebda5afd37fc00f82c79ad0c2a0828a09e1b870cdabedd64326073980676743b07f12823a904f2ffa7b0c2f7e1902c9b8e61ff5c8117
SSDEEP

3072:KNSMMfRY0NBQwcWA07nBy+nghqgBgg/Y2AiVQSzid8r:KNSrS0NBQwXd75gBg72JQSzM8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c413fc4b514b1e537f6ef00c039ceda_JaffaCakes118

Files

3c413fc4b514b1e537f6ef00c039ceda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6133a0c0198478e1e4c18060517ea867

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
ExitProcess
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE