bb7e989e01809015226eef8759676f4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb7e989e01809015226eef8759676f4c_JaffaCakes118
Size

49KB
MD5

bb7e989e01809015226eef8759676f4c
SHA1

1c021bc219eb4bce7ea0b166d4adce3a289ff0e7
SHA256

ec6d95d1c9019b92d85097b1c61e074ccebfb34d2ca3daa013755ede7cfd9c6e
SHA512

569bcea9e6640cd41d173e690ed5e990bfc4a01db63066ad58fc11f873f56350973426970bec9ff274c07971ae02e910b3019f10552836b325db25cf65029ba6
SSDEEP

768:SA/9OEzjvs0vHtdI5n12r8VRIIzPUHVoetd5Vzq7KWXAGknloNh:SAF9P00Vaf2rE2cnEd5tqrXRCmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb7e989e01809015226eef8759676f4c_JaffaCakes118

Files

bb7e989e01809015226eef8759676f4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47f25051b62f6512973e6b53d67e6057

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
HeapAlloc
GetEnvironmentVariableA
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ