ba2cae8a043a98dd1a7221146f32ae10_JaffaCakes118 | Triage

Sharing

General

Target

ba2cae8a043a98dd1a7221146f32ae10_JaffaCakes118
Size

174KB
MD5

ba2cae8a043a98dd1a7221146f32ae10
SHA1

f5c58d6e8d94a38c56666d37acf6ee147eeed56b
SHA256

2bbd5e0c7a0b11b0e8ab48da25c0341d29e261889e6f1db125f91603cb52e8b8
SHA512

9efd4cb7ac4c067434bfec70810d5ac7f07f0d024b3b4d2dfa9653ce118f761ea45ca4c2fab078a0b620abad89ddec5af974539ae4e06f7009f27bf1c0baee29
SSDEEP

1536:91moQj+PGsGxPe7iGZQAbPVkbMeWCkglT/BpnayY896GWdLkAWWZz5f/lGuDXsRk:jmoQjEiGZZLgJnG8dWxlbsqsRFW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba2cae8a043a98dd1a7221146f32ae10_JaffaCakes118

Files

ba2cae8a043a98dd1a7221146f32ae10_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c6ce08f606b877dc5926bfa2be921535

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
InitializeCriticalSection
LoadLibraryA
MapViewOfFile
OpenFileMappingA
RtlUnwind
SetLastError
TlsAlloc
lstrcmpiA
lstrcpynA
lstrlenA

user32

MessageBeep
EndPaint
DrawMenuBar
CreateCursor

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA
RegEnumKeyA

Exports

Exports

Bcmqbwlb
Llreutiaed
Tdikb

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ