bbb0e66c5d57b7327bed8ee16a31ff3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbb0e66c5d57b7327bed8ee16a31ff3e_JaffaCakes118
Size

108KB
MD5

bbb0e66c5d57b7327bed8ee16a31ff3e
SHA1

56ecdbc8da378d327bdb3894f47cb8c39b58996c
SHA256

c0a3aad36543110324da13e625471cf026982dcfbfbe79e774eda3508d1fc3e8
SHA512

00685c1bf9b3dac555643204de9a92de98730cf8f651459f6aa467572207fdecd8504ab410a855e919bf365d2f7185dc9866afb70c38b7bfaef156ff5802b2bc
SSDEEP

1536:NUEo35OLT7VbYwmV3D8qLEPjPR+ys0YeTMDBa1JuVZ0RxdKP3u1oCPVyJ5SPhGzY:Kp5ITZ0zwb+BeEBajiS4PfWEpzh3Qvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbb0e66c5d57b7327bed8ee16a31ff3e_JaffaCakes118

Files

bbb0e66c5d57b7327bed8ee16a31ff3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37930b8284e5213868aeeba1e017794a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
ExitThread
CreateFileA
WriteFile
CloseHandle

comctl32

DPA_DestroyCallback
DrawInsert
FreeMRUList
DrawStatusTextW
DPA_Search

Sections

.text
Size: 75KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE