bc12591a53f7c9f8bbcd9a322b9fc69b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc12591a53f7c9f8bbcd9a322b9fc69b_JaffaCakes118
Size

83KB
MD5

bc12591a53f7c9f8bbcd9a322b9fc69b
SHA1

c86c73fc4bf047d274df9a5998b07820bd96532b
SHA256

19bdb2c5f36672626f3d055eefbb90bfbc4ac38837b06553b90c6e20dc69529d
SHA512

16a0313f864b0ff81a3125838f695a5fbc8aff75d26c6cb0b17a6e5e19227c42a4b35c2f836d00aca9f99396199c866022ecbb0a71fed75513f3f92f75402173
SSDEEP

1536:60TsTsTsTsmFl9LoFEzvP7/k/tFglR2fFNryxste+fKwxK7mjEErxTWDTMqhGKYr:60TsTsTsTsGltoFCbiFgiyx43K1ijBki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc12591a53f7c9f8bbcd9a322b9fc69b_JaffaCakes118

Files

bc12591a53f7c9f8bbcd9a322b9fc69b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f6dfdf02b92bf233da05dfed9d5dce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadTimes
ExpandEnvironmentStringsA
GetProcessId
GetVolumeNameForVolumeMountPointW
GetCompressedFileSizeA
SetCommMask
BaseInitAppcompatCacheSupport
CreateDirectoryA
MapViewOfFileEx
SetFileAttributesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE