bc34370355884c04ef99b349b6b98486_JaffaCakes118 | Triage

Sharing

General

Target

bc34370355884c04ef99b349b6b98486_JaffaCakes118
Size

64KB
MD5

bc34370355884c04ef99b349b6b98486
SHA1

477a6352a30c75b2f295a69ae89869659bb004d8
SHA256

e7a7abf9a9b92ed0b2fcc41312f6c35351ef18c554776f08d3c24ce563cd7329
SHA512

3997006d0e0da8a35a571a0c3ab06d87d422d381a424ad83aa667580936b5659ec0c983b3cd9e30314d9222899df936cf9c97ff3444a705570faa3ecec273aec
SSDEEP

1536:4jzyXgWwWe+NUZQqfBwHKydJGiWB/VNGXcIpsrodqF+V7lpGewlFIj:4PywG3NUZtfUZdyVIvNLVJpksj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc34370355884c04ef99b349b6b98486_JaffaCakes118

Files

bc34370355884c04ef99b349b6b98486_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8acea44d8364135cd5848bc748d53860

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ColorAdjustLuma

kernel32

VirtualProtect
GetProcAddress
VirtualAlloc
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE