bbd11ea9cf85cebaa1950efb33610eb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbd11ea9cf85cebaa1950efb33610eb1_JaffaCakes118
Size

236KB
MD5

bbd11ea9cf85cebaa1950efb33610eb1
SHA1

1be07d18c461058e440fff1dd3cab5f67ecfe673
SHA256

bc384a214e24da7756d5279eaaf61bc15fd66b19b80e22cbd6824ddd6715b050
SHA512

7165f92da55493c5c37886e4e96b8b82f019ac73ff085cc7403256d70c47fd04753c883a34da22ada825f2e2217e035d2300741a372c8a1f0998d2ae65096bef
SSDEEP

6144:b3ouBn5oP8qxFrthTZW2665Qu46uYZ4gK43:VBn5oP8qxFrXv665Qu46uY6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbd11ea9cf85cebaa1950efb33610eb1_JaffaCakes118

Files

bbd11ea9cf85cebaa1950efb33610eb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f1aa848ae6d60e1833485009c1268d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
??2@YAPAXI@Z
_except_handler3
sprintf
__p__fmode
__p__commode
srand
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
rand
_strnset
_mkdir
_strrev

kernel32

GetProcAddress
GetModuleFileNameA
DeleteFileA
Sleep
FindResourceA
WriteFile
GetTickCount
GetLocalTime
lstrlenA
FreeResource
CloseHandle
FreeLibrary
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ