bc9cc310fc115f4738cf1c5d2c3675e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc9cc310fc115f4738cf1c5d2c3675e6_JaffaCakes118
Size

130KB
MD5

bc9cc310fc115f4738cf1c5d2c3675e6
SHA1

9ea1ccab510cd19b3c1807ec7b5be75edad19813
SHA256

958b0a8a965ad197dbd83c3c5d0dfb03510be10cd6f356fb65dad1091c8d78d4
SHA512

097d78cf499a5f884dc44bcd5b7fe776e627bd6fa8f3c462c66cb67eb227deab0cafbbd50d8a2223529d9b2e634719dcdb213d37c054b62c3290d4a9d5269304
SSDEEP

3072:EM0MTqZs9+8XzrIY28aaDQ8jm6OApVKtcYZj:EMXOZ4+8XPcXaDQq3Ozn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9cc310fc115f4738cf1c5d2c3675e6_JaffaCakes118

Files

bc9cc310fc115f4738cf1c5d2c3675e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

447710c4c9b397f936f36a6b8f4659c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharLowerA

kernel32

LoadLibraryA

Exports

Exports

��nsideAction@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?InsideAtom@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?InsideByte@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?InsideFixout@888GPAUHINSTANCE__@@U_COMMPROP@@`D
?InsideOrder@888GPAUHINSTANCE__@@U_COMMPROP@@`D

Sections

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ