bc7bc800ec82215bdaba6125f7bd7914_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc7bc800ec82215bdaba6125f7bd7914_JaffaCakes118
Size

157KB
MD5

bc7bc800ec82215bdaba6125f7bd7914
SHA1

b4b35e19746a7f590390a9fc8023859297c1d0e4
SHA256

829cc0348528f3b8fa76e12fd9faf346ec007159fa44c637ed33cc22e7c0c747
SHA512

a31f3b686283353e6ba6eba291892ada6ed0a02a9511a0014da91dc19183a63f91a40a0201d7180027651708d6df909792d07a1b0f2679b9dabfaa9a9eccd54a
SSDEEP

1536:u4nkp60OJKE96i76xYdFqLNlt1fpfFbvPuJCqWZzHT2/qOEEeUkuiR3NlrjUAXCI:u4kM0qrGtz7fpEJ/qzHT6tixHII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc7bc800ec82215bdaba6125f7bd7914_JaffaCakes118

Files

bc7bc800ec82215bdaba6125f7bd7914_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen

user32

MessageBoxA
wvsprintfA

kernel32

GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ