381df570b31f6c039960c50a885304f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

381df570b31f6c039960c50a885304f6_JaffaCakes118
Size

13KB
MD5

381df570b31f6c039960c50a885304f6
SHA1

75011f49b968f9a3d2ed2e9e99ff7745acc2549e
SHA256

c97ad7477349de613c4ee73497ea6bc3709a1bb9dc0298e4486a757d33b3c4d3
SHA512

c49d3bc5344c35d8add536f1ed7915f43c678d13e8f48372ce0cc8297f08a9ff4a989402010a36a2c9c1f5926f80a8e4033f8a8a45692be58e996ea874e605b6
SSDEEP

192:jkCwvZ0mpvFf8GWT0UvDBAQLO5xmrtYAL2JliPXhhR/9GO85L:QxLvx8GSvDOy5YAL2fiPXhT/gR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
381df570b31f6c039960c50a885304f6_JaffaCakes118

Files

381df570b31f6c039960c50a885304f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1e6d05aa0c65a7d120d726ee0e43874d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
SetEndOfFile
FreeLibrary
LoadResource
SetFileTime
WriteFile
SizeofResource
GetSystemDirectoryA
MultiByteToWideChar
FreeResource
LoadLibraryA
LockResource
GetModuleFileNameA
GetFileTime
GetCurrentThreadId
CloseHandle
GetVersion
GetTempPathA
SetFilePointer
FindResourceA
CreateFileA
GetProcAddress
ExitProcess

user32

GetInputState
wsprintfA
PostThreadMessageA
GetMessageA

advapi32

OpenServiceA
StartServiceA
OpenSCManagerA
CloseServiceHandle

shell32

ShellExecuteExA

msvcrt

memset

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ