bbf1edb7e90a8c472e67a783fbbd756c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbf1edb7e90a8c472e67a783fbbd756c_JaffaCakes118
Size

5KB
MD5

bbf1edb7e90a8c472e67a783fbbd756c
SHA1

136288f2f6a9135c61a66a5b8dd0c7c20238e5d9
SHA256

e6866f96eb26fcaa64bec74b3d57a1eec0b3d210f9163ba7c269081d04b8bf36
SHA512

d1d40a6669e5efff6a4533526785fabd0beeba4f617bb74e58bbc2f46ab6e5cfb2c642045711b9a8a094d08f02ecbc3a2f7538805a84016f45d8ef0936213787
SSDEEP

96:18dDlgcNhFxW/7n01fLXVvNzVNgvpJMC9prpwy12vkWnliu2NkzLUssCFzs608BT:18QcNhCefTVvNztCTr312vkWl92NGosX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbf1edb7e90a8c472e67a783fbbd756c_JaffaCakes118

Files

bbf1edb7e90a8c472e67a783fbbd756c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11230e9744c56754480a43b992118932

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetWindowsDirectoryA
GetCommandLineA
GetVersionExA
GetLocalTime
ExitProcess
Sleep
CopyFileA
GetLastError
LocalAlloc
InterlockedExchange
RaiseException
FreeLibrary

user32

wsprintfA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_itoa
fopen
fscanf
fclose
strchr
_stricmp

rpcrt4

UuidCreateSequential

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ