bc35f24041227ae164a432e70cbccebb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc35f24041227ae164a432e70cbccebb_JaffaCakes118
Size

192KB
MD5

bc35f24041227ae164a432e70cbccebb
SHA1

1c071f1746091ee92f59bdc7b3e04a0239a94f6c
SHA256

adb897e657b4e4ecd1c466c79c0bf3f0aef833388174240c197285aa5198fcd1
SHA512

872c458095d17f8bd943477c65dc1dc765ffc8976950e602641cdf760d5337267f3d39bbadaaa7d222aa1d1df8a92ad8e1a21bdc7c2109b461b90173d4f7273f
SSDEEP

6144:IHK+Twznu6FTel15cbZrsxu2aiDwfhGuEfBb:YDTAu6sf5cbZrsg2aiMfgf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc35f24041227ae164a432e70cbccebb_JaffaCakes118

Files

bc35f24041227ae164a432e70cbccebb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a400b3180f55333acc7163994091088

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
GetAtomNameW
SetStdHandle
MultiByteToWideChar
TlsAlloc
GetConsoleOutputCP
GetOEMCP
GetACP
HeapReAlloc
RtlUnwind
IsValidCodePage
EnumResourceNamesA
WriteConsoleA
GetCPInfo
TlsSetValue
HeapSize
GetCPInfoExA
SetFilePointer
GetLocaleInfoA
VirtualAlloc
GetDateFormatA
TlsGetValue
RaiseException

occache

FindControlClose

shlwapi

UrlUnescapeW
PathIsContentTypeW
PathAppendW
SHCreateStreamOnFileEx
PathIsFileSpecW
PathCreateFromUrlA

Sections

.text
Size: 95KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ