bcb2dab2285be2e6b76a925f2b56742f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcb2dab2285be2e6b76a925f2b56742f_JaffaCakes118
Size

84KB
MD5

bcb2dab2285be2e6b76a925f2b56742f
SHA1

9a61204285ca981d760d1340ae2eaff8be4f0236
SHA256

5c36528a35bd37b2a3ebdc3f4a64fe436d5f31cc9cb76a7526ec3ab7fda35cec
SHA512

989108205f41cd49df2e0e8d3016985f0e70e7dd64513c2fe13cbba3e0f28c0219fd6265120338571689a46af9e652cf5d50222cf559c39c038a599f240cfa0d
SSDEEP

1536:4pE9iHQrLpyzNYTtmg29fDtxHiCGBTScYvphcTraBwHD3PzN/autnDp2HrEuuKaH:4pEzLpyWtDqDDHitdScYWHD37wrxuKT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcb2dab2285be2e6b76a925f2b56742f_JaffaCakes118

Files

bcb2dab2285be2e6b76a925f2b56742f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c97b49126e50ac1ce7b74b693d30c071

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter
VirtualProtect

msvcrt

_access
_fstat
_getcwd
_isatty
_lseek
_open
_read
_close
_setmode
_stat
_strdup
_cexit
_errno
_fileno
_findclose
_findfirst
_findnext
_fmode
_fpreset
_iob
_setmode
_stat
__getmainargs
_stricmp
_strnicmp
_wcsicmp
abort
atexit
atoi
bsearch
calloc
exit
fclose
feof
ferror
fgets
fopen
fprintf
fputc
fputs
fread
free
fwrite
getenv
isalnum
isalpha
iscntrl
isdigit
islower
isprint
ispunct
isspace
isupper
__p__environ
isxdigit
malloc
memchr
memcpy
memmove
printf
puts
qsort
realloc
setlocale
signal
strcat
strchr
strcmp
strcoll
strcpy
strerror
strncmp
strrchr
tolower
toupper
__set_app_type

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE