badbde1a4887a2ac0c439a83ce37407b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

badbde1a4887a2ac0c439a83ce37407b_JaffaCakes118
Size

197KB
MD5

badbde1a4887a2ac0c439a83ce37407b
SHA1

00f784c7fd6ab98ae92a0cd5c9d7cc0146589b98
SHA256

420d80b2111191cbf9a2119a34eef31428ef65fe2b8f92f4365111c00723a787
SHA512

436190ab90827a872f4515130ab2545e21a6d5bf6b130122554b65a3e6c7d13f1c2f82d611a8ea0de743b1e7a4986e55adadd5210f0d425e7fec90170e4df8e9
SSDEEP

3072:gyv4SwU8eRGqOIiJ8sQsIcYq0B/MYV++gRX6yEqv89bo/1aCAEX547NpTfNPz:wHU8eCJ8OJE4Ia89bpCmNhNPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
badbde1a4887a2ac0c439a83ce37407b_JaffaCakes118

Files

badbde1a4887a2ac0c439a83ce37407b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d74af08b25e34adc349d1735728a0a22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

WaitForSingleObject
CloseHandle
WriteFile
CreateFileA
CreateThread
lstrcatA
GetLastError
CreateMutexA
lstrcmpA
lstrcpyA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcess
lstrcmpiA
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetProcessHeap
lstrlenA
GetProcAddress

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ