bbd540a98e58d204450fa431602e2c9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbd540a98e58d204450fa431602e2c9f_JaffaCakes118
Size

63KB
MD5

bbd540a98e58d204450fa431602e2c9f
SHA1

72e2852b5fcd254e05b9342f8c5a6f7e075c21d3
SHA256

04f19d864b9a5f7999544443721cb151b2b7633919986e91377657f68cc96ef2
SHA512

af1d670e7fe0cf6b80120b7816384435f248d713f17581c675eedb5833368c69687848d2f7c403583d31ad90cc759016920905928c003b45a0257a29b077cbeb
SSDEEP

1536:b49fnfqbIijE945SkU8lmzdUYgRElDpEK7:aqb3Ee8k5YgsSS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbd540a98e58d204450fa431602e2c9f_JaffaCakes118

Files

bbd540a98e58d204450fa431602e2c9f_JaffaCakes118
.exe windows:3 windows x86 arch:x86

75d024933baf04d30b621d40b78edab1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleA
LocalAlloc
MultiByteToWideChar
QueryPerformanceCounter
ReadFile

user32

BeginPaint
CharNextA
InvalidateRect
LoadIconA
SetWindowTextA
ShowWindow

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ