bbbc578789b1e3ddab23e533c3470e46_JaffaCakes118 | Triage

Sharing

General

Target

bbbc578789b1e3ddab23e533c3470e46_JaffaCakes118
Size

42KB
MD5

bbbc578789b1e3ddab23e533c3470e46
SHA1

5d3fa2022adddd5d449b602380c5ddabae6b0d69
SHA256

341eb5ee174a3beb6fbe971762178dc5bc90aad05ee80af94e3bfe59d4f42205
SHA512

eddd169cf573cf5b2c52df053a3cc36a302324048f059774cdca20dad2d1563d5f95e9904f97786136caf109d72e5a274b0edcdad35d3b4cd0176320f02c298e
SSDEEP

768:CxpaZDTHJCO6l+TtAsUuc+8JZQUf/lFv9cxTyOAQJIngo:C4DTH+MpJc+8JhXlR9ceq3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbbc578789b1e3ddab23e533c3470e46_JaffaCakes118

Files

bbbc578789b1e3ddab23e533c3470e46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64bc9219a31e011ab17d7969582ff6bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LockResource
CloseHandle
GetStartupInfoA

advapi32

GetUserNameA

msvcrt

strcmp
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.TEXT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ