bba7ed5fc42f47afb9047b3e5efedf46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bba7ed5fc42f47afb9047b3e5efedf46_JaffaCakes118
Size

6KB
MD5

bba7ed5fc42f47afb9047b3e5efedf46
SHA1

2761a58e80b447a9d49539f41c6d6cf601d33723
SHA256

d58e5f0f06657e0c4b5c575e2aaf4ab95797a1345044fa38a529fc2b72307513
SHA512

6d48b1e674a5c1db3e272649ef5bc2763e1197ac7281e2a335951e42ac2310b0401e616a69d980f886cdec30ef97f3d86fad1312eead70ae5a8cb24885d0607f
SSDEEP

96:a4eg0y8XdLnWA3w7cnXF+SbFH1RWkxOFJsxsM6vCjAs7ghGMhylc9mfdo:Ug0vdrPsqXFlR8RhGMh4c9mfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bba7ed5fc42f47afb9047b3e5efedf46_JaffaCakes118

Files

bba7ed5fc42f47afb9047b3e5efedf46_JaffaCakes118
.exe windows:6 windows x86 arch:x86

77b5712277e4dbd07cb7a64407c84a3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
MapViewOfFile
FindClose
GlobalFree
FreeLibrary
GetProcAddress
CreateDirectoryA
CreateFileW
GlobalLock
SetComputerNameA
Process32First
CreateMutexA
OpenProcess
GetModuleFileNameA
CreateProcessA
Process32Next
GetLastError
LoadLibraryA
GetVolumeInformationA
GetFileTime
GlobalUnlock
GetModuleFileNameW
GetThreadPriority
ReadFileEx
GetWindowsDirectoryA
GlobalMemoryStatus
SleepEx
FileTimeToSystemTime
GetShortPathNameA
GetTempPathA
CreateFileMappingW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ