bc88aae44b5c9e5794139881386b9c31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc88aae44b5c9e5794139881386b9c31_JaffaCakes118
Size

16KB
MD5

bc88aae44b5c9e5794139881386b9c31
SHA1

9b869d08eb0468deecb798f3978476866c16b096
SHA256

3cc5c8f2e15130965db86f9e51fbd09a8d2e2cb4928cd419bd882f76c51777a9
SHA512

2102ad890572b7573044b68f2b34c716bd49dcd1707f9bae55662d1f966ae082dd54c2be3a652e4c4ea987fc2d7819a8252be831b0972b4c219db429847fe76c
SSDEEP

96:zMa8/wAbeqbEJIocRtZXvSXgufmvg/RUi+0l2HCueUi:IcAbeqoJ8XvmguWgZA0KCrU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc88aae44b5c9e5794139881386b9c31_JaffaCakes118

Files

bc88aae44b5c9e5794139881386b9c31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ce06ee358c59e9c4e93f329b1590697

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoCreateInstance

kernel32

FindNextFileW
Sleep
FindFirstFileW
GetDriveTypeW
CloseHandle
WriteFile
CreateFileW
GetCurrentProcess
GetProcAddress
GetModuleHandleW
GetVersionExW
Process32NextW
SetFilePointer
Process32FirstW
CreateToolhelp32Snapshot
CreateThread
GetLocalTime

user32

wsprintfW
RegisterClassW
LoadIconW
LoadCursorW

gdi32

GetStockObject

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE