bbfe6af4b41e3e79a38f78dc9e0cd7de_JaffaCakes118 | Triage

Sharing

General

Target

bbfe6af4b41e3e79a38f78dc9e0cd7de_JaffaCakes118
Size

87KB
MD5

bbfe6af4b41e3e79a38f78dc9e0cd7de
SHA1

bad4b360b793f443f593406f158791b10887ffa4
SHA256

94886d8f4db82442572b571b3e15b667c3546d117206edea4f289ebe7a21f9a2
SHA512

e32aa598321f030b07bdcfc65308b638cbce81b8f6ff2d13772affdaa4732a9f276682a172f4cb5aedf5978b5c34a28f807da6f4fff70b92583da999c9218489
SSDEEP

1536:U3QANdsnIVP0dWxG76hpnBGcZgK+3bxz5vzHX9aZTs/aJ6fdcT:uQAAIVphpnBGcZT6b15AZTKa8fda

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfe6af4b41e3e79a38f78dc9e0cd7de_JaffaCakes118

Files

bbfe6af4b41e3e79a38f78dc9e0cd7de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

307b7c38293e0238cc18aac5fe10cf32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtect
GetModuleHandleA
ExitProcess
SetConsoleScreenBufferSize
Heap32ListFirst
GetLastError

advapi32

AdjustTokenGroups

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lnull
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ