bc8f9d6fae5e7b59bf40aeaae54c70b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8f9d6fae5e7b59bf40aeaae54c70b8_JaffaCakes118
Size

74KB
MD5

bc8f9d6fae5e7b59bf40aeaae54c70b8
SHA1

1994d7348be184dc205c6b41da7e7a83bdd999b4
SHA256

effa41057a11467452e7aa63d762c7b8ee3db7796e07afc34d04fdc9deae79fa
SHA512

93d89bb57e9076cbfc43f60ba722c5a7d5401c301abaed7fa2975826624a5a1222d6ec9c7b9c1ebcb758f2a2630f906c06136f70fdd1c5c66cb0fff38bf01068
SSDEEP

1536:628gRFMR7n6I0ipFMPI2bf9uY9eGMIoYR44s99mHYyM4z8:62xyRfNpUI2/elI1RdsU9Mm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8f9d6fae5e7b59bf40aeaae54c70b8_JaffaCakes118

Files

bc8f9d6fae5e7b59bf40aeaae54c70b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE