bbdde422db411fb0f28cda7d23d7429e_JaffaCakes118 | Triage

Sharing

General

Target

bbdde422db411fb0f28cda7d23d7429e_JaffaCakes118
Size

165KB
MD5

bbdde422db411fb0f28cda7d23d7429e
SHA1

2b333b3c580b7b8ad59f641064aca67b322f9a36
SHA256

a63113349bc48de70e4c2685a56d3621787738690bf8babdc4364c334368cd43
SHA512

e0873bf63f201fef46fa7c3918b7ec6e213320bd6ea980be8c0b2665cf660d06efc7027c80b4a3d21b52d530ec85a062806c2cc2c764222bfd11dabc32373980
SSDEEP

3072:viIJH0ZgRhQAX3v8cKeyqtzzsUSYKvRtewSYl4Jx5AFyunZw:aSU2jQAXf39yqt/s9YKPtSO4Jx5AbnZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbdde422db411fb0f28cda7d23d7429e_JaffaCakes118

Files

bbdde422db411fb0f28cda7d23d7429e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

09d17a0888e60c7555ef30ad0aa18863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
InterlockedExchange
GetOEMCP
GetEnvironmentStringsW
SetProcessWorkingSetSize
HeapCreate
lstrcatA
GetModuleHandleA
IsBadReadPtr
IsBadStringPtrA
SetErrorMode
HeapAlloc
SetLastError

msvcrt

_acmdln
_rmtmp
_mkdir
__set_app_type
isdigit
__p__fmode
_wcmdln
_cputws
_wtof
_initterm
__getmainargs
_XcptFilter
_fileinfo
exit
memcpy
_getpid
_controlfp
_adjust_fdiv
__p__commode
_exit
__setusermatherr
_atoi64
_except_handler3
ceil

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ