bc87a37198cd5c74a776877252bc6514_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc87a37198cd5c74a776877252bc6514_JaffaCakes118
Size

1.1MB
MD5

bc87a37198cd5c74a776877252bc6514
SHA1

901a702a81e7d44a8e819cc5870afb5af4638615
SHA256

2d6584fcb9085990f1c1dfefa1d57cf3c705240fa58b5e2be25e824acaafe45b
SHA512

b9f31d3256b8ea9eb5e67da2eb81270d5150ba10cd4574db15fac1547d04d261b31ec51099f2a669b57a7e916afe4762c85f629630c93a472414eb996f2cda73
SSDEEP

24576:NfgZnSPjsVKQL9HVUvz/IbCVtVJ48VBKfOuJd0V:WrLuIb+1YfOuJaV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc87a37198cd5c74a776877252bc6514_JaffaCakes118

Files

bc87a37198cd5c74a776877252bc6514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3877635be52444727470ffcdb6d5bdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

AdjustTokenPrivileges

version

GetFileVersionInfoA

wsock32

WSAAsyncGetHostByName

winspool.drv

ClosePrinter

comctl32

ImageList_Add

comdlg32

ChooseColorA

gdi32

Arc

shell32

SHBrowseForFolderA

user32

ActivateKeyboardLayout

winmm

mixerGetControlDetailsA

ole32

CoCreateInstance

oleaut32

CreateErrorInfo

olepro32

ord251

Sections

.text
Size: 1.1MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE