b2c06cc2138962bb6182062068e76733_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2c06cc2138962bb6182062068e76733_JaffaCakes118
Size

1.2MB
MD5

b2c06cc2138962bb6182062068e76733
SHA1

2f7a60433cd541ffa0fa4096e46389f4ce8c4414
SHA256

9f5ef530e565c7f98a4efec9197f3e4e35821eca766e16c6b68fefc075cf4926
SHA512

a0e48002c9e9a85036ad6bd3f12836497fb258c20709b1b9dbb850bb615e2933dc425b46c6105d11df7e891a80ec13b426cfad853728fe4d2303abd8a46cb39a
SSDEEP

24576:TprQ5EyYaKuNbUCR10XIP8OyvPHO3u9rRGXeXuCBlG:TpPZaKt1u3BVb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2c06cc2138962bb6182062068e76733_JaffaCakes118

Files

b2c06cc2138962bb6182062068e76733_JaffaCakes118
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 219KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

orpfehxk
Size: 944KB - Virtual size: 948KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nbiwbozs
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE