bc38c7eb13a62c0b8ab0e9045ae6cf5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc38c7eb13a62c0b8ab0e9045ae6cf5a_JaffaCakes118
Size

15KB
MD5

bc38c7eb13a62c0b8ab0e9045ae6cf5a
SHA1

7aa05a6ce79cabe9bbe58342f22ee0530ffffa7e
SHA256

27d59457c50e001653e06d8d3ed370a661cec630bcfc6b0144f5e80950fd555c
SHA512

9e69d0324b2f25aeeeb5e963f30cf3b6f641ba2a89580ac57564ba3973c100d3dbfa6c2055a465ba168a5b05dc5cede78e10d6f49bedcdb529eadd36a357ef7f
SSDEEP

192:r1znlGWoAHCMQIF4USlXSSRVJ9zlPrrSZ+mdnRIp//CwNulwauzZQ1sSjv9PwFzh:1lGrUpSRVDztjQtwkwautQJ+/WK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc38c7eb13a62c0b8ab0e9045ae6cf5a_JaffaCakes118

Files

bc38c7eb13a62c0b8ab0e9045ae6cf5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ec9289139e4df42bdbecabf7a89c3b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePatternBrush

user32

ShowWindow
SendMessageW

kernel32

VirtualProtect
GetLastError
GetModuleHandleA
GetCurrentProcess
GetProcessVersion

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ