4620e5582ae7a3f6a8f03c0b8964155f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4620e5582ae7a3f6a8f03c0b8964155f_JaffaCakes118
Size

7KB
MD5

4620e5582ae7a3f6a8f03c0b8964155f
SHA1

f341d66de471f6d9ac279afbf7b28c32d9110f96
SHA256

b050a50600785c44f14be3d3396c8600ae5007958bda0c8b5aa6f4ee37253056
SHA512

6b81be79fc4a6709bf27f25b1408533bfd7452eb603278830b153f81b9938e1c418d3eca9a5d180443833a06ab093c08fd76d25237a4b39082f94bda827b3268
SSDEEP

192:fy/XO/mru+h31Pes80Y3yw/YCHL/3jkko1Mga:avOOrua3BYHL/H8C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4620e5582ae7a3f6a8f03c0b8964155f_JaffaCakes118

Files

4620e5582ae7a3f6a8f03c0b8964155f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44e03399c4fdd560ebf247543e68d3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
GetTempPathW
GetLastError
LocalAlloc
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
CreateProcessW
GetTempFileNameW
lstrcpyW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind

user32

LoadStringW

advapi32

OpenServiceW
ChangeServiceConfigW
StartServiceW
OpenSCManagerW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aBc
Size: 263B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ