bc3ba851b0baaa6214ba2b170189e76a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc3ba851b0baaa6214ba2b170189e76a_JaffaCakes118
Size

125KB
MD5

bc3ba851b0baaa6214ba2b170189e76a
SHA1

fa68dc8dbb8b5c44c3dd7e37b7fe5e6c3b26fe49
SHA256

e93c2c97e809f79a7a0b99efa1ddaaf11e6988c8daabad0751bafee0c3bd4483
SHA512

ec04749b31338243057ca2e5c07de7e4f4c8ed8383f7af8c4f826885a3e61f8ff09cabd536ed473a31d05f4c8635f82b796d728a07197bf00ac3b38a4797c774
SSDEEP

3072:4aqgYqSp/bIRb/9UbIRRHsYYUh75W9dUf2gHjUUOp:ts0Rb/9Usfo9djg7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc3ba851b0baaa6214ba2b170189e76a_JaffaCakes118

Files

bc3ba851b0baaa6214ba2b170189e76a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98f2eb9fb7bd6556bbf29ac4920c5a0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetStartupInfoW
TlsGetValue
GlobalReAlloc
lstrcatA
GetAtomNameW
GetDateFormatW
CreateProcessW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 33KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ