572a79b0b2a7012be709907630a961f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

572a79b0b2a7012be709907630a961f1_JaffaCakes118
Size

19KB
MD5

572a79b0b2a7012be709907630a961f1
SHA1

f114710890b2eaaca0db4f573ff3f78c0d4e2591
SHA256

e3b1e3d64091c787fd9fcf9ab6fb47a84ccbba1a8e7c7268ebe87d1f85ed0247
SHA512

153009ab6b3606811fde543c145188b4cee91ebaf83336a5fb5229995e8569d900795e982174208ff06a3833637a2982c917ecaff73bb5265417fdc6e1348ddc
SSDEEP

384:7xORQl0DS0M+8bDtcB6difFRJGe3M9knPpzP+:ERQl0DS0M+8XEmiffXS6PpS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
572a79b0b2a7012be709907630a961f1_JaffaCakes118

Files

572a79b0b2a7012be709907630a961f1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d28b12f1c08830f1407db1ee98ad7f17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
FindFirstFileA
GetWindowsDirectoryA
MoveFileExA
VirtualAlloc
WriteFile
lstrcatA

advapi32

CloseServiceHandle
EnumServicesStatusA
OpenSCManagerA
OpenServiceA
QueryServiceConfigA
StartServiceA

Sections

.code
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ