bc45dea0fcaf1c2559c27d9236bfc500_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc45dea0fcaf1c2559c27d9236bfc500_JaffaCakes118
Size

52KB
MD5

bc45dea0fcaf1c2559c27d9236bfc500
SHA1

869ca8c49ff28b3bb0e3a68f4d839f46bd1e64c8
SHA256

41c844b54eb8ad48d9e7c10c93215a9f03eeedec4c6c0d7cf21cd94bb9cd2e66
SHA512

ac0f324446685b043e6b11805b84e24ebb321ed19828f515efcfa33353ff4f7321ec53c5fd3d8d8212a5f4b70832a03ecd947b71ac8ac1767578c3c4f966eb03
SSDEEP

768:/TkykpSO3aH7UoWr18VXfCn64/+U8IGYWCn6pwkeafkaRIs5/tiBEgl9tLM:vkpSO3aH7krqZ6nVbWC6VeafI8Fgl7LM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc45dea0fcaf1c2559c27d9236bfc500_JaffaCakes118

Files

bc45dea0fcaf1c2559c27d9236bfc500_JaffaCakes118
.exe windows:4 windows x86 arch:x86

054f039a8b4c688e56f944f28119ce0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetStartupInfoA

gdi32

CreateDCW
DeleteDC

msvcrt

??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??3@YAXPAX@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcmp
_initterm

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ