bc9fa31f1a52cc23201010073c863aa6_JaffaCakes118 | Triage

Sharing

General

Target

bc9fa31f1a52cc23201010073c863aa6_JaffaCakes118
Size

364KB
MD5

bc9fa31f1a52cc23201010073c863aa6
SHA1

a798e1d011ddc0ec9921aecb133cc5edad71c23d
SHA256

5fe5760ca02864a3d17da9c3c218153d9f5eb34eb644828467a99f7e4cce88ff
SHA512

1d4baa7da35d087f0162cfcd2598b569d08262774f67d2248ec3fe15e939ebc68cfbb21a5ee87e7549e63a117be29ac961fcd0c2a02d55de6717d2e59e79981c
SSDEEP

6144:Ozopk2O8LXXCiuny3J+U9IC7AME1Kw8v2ZkbywkqvalyUy8:Oz4TLHtMygZC7A8ekby0acJ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9fa31f1a52cc23201010073c863aa6_JaffaCakes118

Files

bc9fa31f1a52cc23201010073c863aa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3119ca3ffd00c888de66cfc0fe9e597a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
FileTimeToSystemTime
GetVersion
GetCurrentThread
SetTapePosition
lstrcmpiA
GetStartupInfoA
GetModuleHandleA

ole32

CoRevokeClassObject
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

msvcrt

_onexit
__dllonexit
_controlfp
atoi
fclose
fwrite
fputs
fseek
fopen
clock
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_memicmp

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ