bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118 | Triage

Sharing

General

Target

bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118
Size

88KB
MD5

bd73401d456dc43dd7ae531c01f51be7
SHA1

ab12c82619f3b27969d65086ca2b480141bf139e
SHA256

3380e5df63329ce25bad618aece6f0e9a07c55992356287605d367894e7bb1ce
SHA512

d08325a20626b898675db82eb8d4b7df6fd3f85a158531dfb04aed6a168416dc6754d06a9fff3d140b031da057c7aed7f9762636803fb11d97eed992183b4a26
SSDEEP

1536:RJGyWqs3mz6tSmDZGfFHeCH8899flpkPI/Qvojm/B9osUzsRD5leVek:RJd3s3aCSmDZ8FHN842cQT7Jdi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118

Files

bd73401d456dc43dd7ae531c01f51be7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ce6b8c5549382237f9d57b9755ca6b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtectEx
ExitProcess

user32

DeregisterShellHookWindow
DestroyWindow

Exports

Exports

IsObwxrvsrm
Anvoljtgo
Phtyffp
InitJeugdjmpvkc
IsBjamaydspaa
CreateApjnejs
Pynehwajv
GetNcnaupnxd
Mberbgecl

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nildata
Size: 800B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ