bc383c949e2fa230cb2cc945b1c6535f_JaffaCakes118 | Triage

Sharing

General

Target

bc383c949e2fa230cb2cc945b1c6535f_JaffaCakes118
Size

312KB
MD5

bc383c949e2fa230cb2cc945b1c6535f
SHA1

cb88a41cbf44d5b7109c4ce71f09cc61ff37d1c4
SHA256

554d26bd54183554daa46c9140b63552c798a718ad189b07a71059378ef8e6d3
SHA512

2128443d747e8f02b724c73b7e9ff0ca613ef7f4d8d7649e0391f0d049f9fc0cc1c08ac37628bfb1c34a753813262c05f26b4ab122433a52c7da50432ffd5cc9
SSDEEP

6144:l1wWsAmf6Uj3Bav0xUzgSwnEaY3+2/Pv3yhTRSbiWI3Uu7DTOogV6:0VAbMccGcSwnjQ7HAIBI3tD6l6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
bc383c949e2fa230cb2cc945b1c6535f_JaffaCakes118

Files

bc383c949e2fa230cb2cc945b1c6535f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abf74243ad26b0c11ec7e71dcfc37d4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

user32

BeginPaint

msvcrt

_adjust_fdiv
rand
srand
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ