bc8cc62e77317cd3d8632034431662a7_JaffaCakes118 | Triage

Sharing

General

Target

bc8cc62e77317cd3d8632034431662a7_JaffaCakes118
Size

466KB
MD5

bc8cc62e77317cd3d8632034431662a7
SHA1

e61b2456c14c188011c6fd153038ba8619aa3196
SHA256

b1ebc4d718b79503f5eda44ef0c0598d82c8cace6e8f83bc39b6a9ca8be5b71d
SHA512

86a9b45361784222bdf2aee2253e58ca817ac61cd28c5e5aaacf937a5f70342e85eff09d9506f55f6cb0827c903d051a8ec9e1aad2365ce5244d441c942e65ee
SSDEEP

12288:Ri5NxrDcDoED4UUR2vCNQKMSMa0Bwumc4:ONxrDU5D42iQ7SMa0Guu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8cc62e77317cd3d8632034431662a7_JaffaCakes118

Files

bc8cc62e77317cd3d8632034431662a7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

398dc27da7e997540a13e35ce43bf6e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle

kernel32

VirtualAlloc
GetStartupInfoA
CloseHandle
GetCommandLineW

user32

GetClipboardData
SetWindowTextW
SetCapture

gdi32

GetLayout

oleaut32

VariantCopy

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ