bc103b6788511e0e75551325342747ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc103b6788511e0e75551325342747ff_JaffaCakes118
Size

7KB
MD5

bc103b6788511e0e75551325342747ff
SHA1

58a2dcab639ca11a1bdc5627caa116a55d9e616a
SHA256

28578795ad8e29e5bfc45399d78d4bf01e02d3eddb29423f52e60b33011262ad
SHA512

0ef75f947a67eb0d2a036d569ed7126b484e7d9d7b30bcf43d37db0f4027777af4532ea7e54c2dc0cd165130d5f1c5ba2296d53bcdcb31a53bae2cabc50c74e1
SSDEEP

96:mgovBMca8ILHzm3EIMIek4BvwKmEEKSOCUB8OGyfRJJZjOl:mgBdjzm0IMRvwmEKSOCO3GyJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc103b6788511e0e75551325342747ff_JaffaCakes118

Files

bc103b6788511e0e75551325342747ff_JaffaCakes118
.dll windows:4 windows x86 arch:x86

81a1640ea422c52580fa47a10074a908

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateFileA
Sleep
ExitThread
CopyFileA
DeleteFileA
GetFileAttributesA
ExpandEnvironmentStringsA
GetSystemDirectoryA
GetTempPathA

user32

wsprintfA

msvcrt

malloc
strcat
strncat
strlen
memset
rand
free
memcpy

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ