bc3cc7ad930a2f5653c626a335c65ad2_JaffaCakes118 | Triage

Sharing

General

Target

bc3cc7ad930a2f5653c626a335c65ad2_JaffaCakes118
Size

56KB
MD5

bc3cc7ad930a2f5653c626a335c65ad2
SHA1

1b9fb80fac82cc4b3d086887468555e4394e9cc1
SHA256

c5e1a0c7e0f4f0bd90c1f4c281ae990500e600b636ab2523e3b07f001d9292de
SHA512

89fae6427114824613f391ed0ab3ed4c19f0330353f7c8012a64f49e9e094d52df1eec2a0d6b3c513e84ac9cf6cbaaee8adfd3f53dee41322135b84a535f42b9
SSDEEP

1536:E1cY5cOFV2XCJcIjtHTAxRjRd0J+2dfw8yo3P2HiG:E1ySeCJcGBTAjsJ+PG3zG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc3cc7ad930a2f5653c626a335c65ad2_JaffaCakes118

Files

bc3cc7ad930a2f5653c626a335c65ad2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f3eb067ef3fa6e08fc877d16d25f871

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW
PrivMoveFileIdentityW
GetFileAttributesW
CreateWaitableTimerW
GetPrivateProfileIntW
DebugBreakProcess
FillConsoleOutputCharacterA
GetSystemDirectoryA
GetConsoleFontInfo
DeleteTimerQueue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE