bb33c676955e344d351694d6cbe84df1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb33c676955e344d351694d6cbe84df1_JaffaCakes118
Size

46KB
MD5

bb33c676955e344d351694d6cbe84df1
SHA1

98f0ff3eabbec9079c6233a5fe2b625af3ee15f9
SHA256

cef8c98b5258fc67d951b537ec7eada215bcb873736b6c7b6ba1e5fa67f201f9
SHA512

6fbbb9827e17b5b9a8a482ce415ddb205846b71ac03a413e2df4ddf68d42b73a4369c630775d1ef1ad351f9b5beac58f786a1d023e77b96faa296c2cf5484f30
SSDEEP

768:v8mSHtVzRfnnzACOpdY8aQxLns1o4Fpv3wWOHXa/mQLG/kgI4RvAlqzLzHAmwSAT:v3SNVNnnzkr2eLnko4FluHsHgI4Klar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb33c676955e344d351694d6cbe84df1_JaffaCakes118

Files

bb33c676955e344d351694d6cbe84df1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66c59c986f62c16905b27298ee89d6d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindResourceA
lstrlenA
FreeLibrary
LoadResource
WriteFile
GlobalAlloc
SizeofResource
lstrcatA
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
WinExec
CloseHandle
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ