bc70ff3ba844491e5ba76eddf02d026d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc70ff3ba844491e5ba76eddf02d026d_JaffaCakes118
Size

174KB
MD5

bc70ff3ba844491e5ba76eddf02d026d
SHA1

f03b253247596c0e73559bb0059cfdd3ae0af434
SHA256

13b3f37004c3cc0215eeb53574de37d96677bbaf46794660631bf88e4c8bc015
SHA512

13cb251372c59f6a666a2741f18d544f33637d3c1588722b4dd5b0686357b416d4e948448368acd1f4449a8f3b5fe9a045cd5000a07c0b86e0fe7b97cc9879c0
SSDEEP

3072:IQeZEKGCzbFq/omm4yEKZ+b+f3nAodJ0kjisyJZEKNI1J4I/bqGhYNFVuoM:IQemKGCzhBd+KfjLyJZEKGJ1DqV6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc70ff3ba844491e5ba76eddf02d026d_JaffaCakes118

Files

bc70ff3ba844491e5ba76eddf02d026d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02675faabd607f5b3c631dd2065b77ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

CloseCluster

kernel32

GetSystemTimeAsFileTime
ReplaceFileW
GetCurrentProcessId
InterlockedExchange
GetStartupInfoW
GetProcessId
IsDebuggerPresent
GetCurrentThreadId
SetUnhandledExceptionFilter
EnumResourceTypesA
GetTickCount
ExitProcess
UnhandledExceptionFilter
InterlockedCompareExchange
QueryPerformanceCounter
Sleep
TerminateProcess
GetCurrentProcess

comctl32

InitCommonControlsEx

shell32

ShellExecuteW

user32

EnumDisplaySettingsW

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ