bad5b12953da0ec26cf7cbfd87887d1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bad5b12953da0ec26cf7cbfd87887d1c_JaffaCakes118
Size

29KB
MD5

bad5b12953da0ec26cf7cbfd87887d1c
SHA1

b407f310d4581671f068356965b0e85ff958d479
SHA256

fc9c246cd359ca5ebdf405c489733c71d1bb9755664f7b6ed013b21f3f03a9db
SHA512

6e307c967100727dcf3c99c2504d06109b3d303b99bfc39a9a1d6240707d3c5ccd1fc66ef1491345370ec77610add260aab461e862d904c3b92d98560d1e9caf
SSDEEP

768:aU/6aqxVGgPtCg8dlITZoh63MPFPWytEn:XExjWr631eE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bad5b12953da0ec26cf7cbfd87887d1c_JaffaCakes118

Files

bad5b12953da0ec26cf7cbfd87887d1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38c6d0ce9ec0641add99e9e27a971139

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
GetVersion
WriteProcessMemory
CreateProcessA

Sections

.text
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rgqomsu
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE