bcdfc65c49a6613dc7e15d80c9c776e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcdfc65c49a6613dc7e15d80c9c776e7_JaffaCakes118
Size

69KB
MD5

bcdfc65c49a6613dc7e15d80c9c776e7
SHA1

d609e2c9af2840b817db6909cab9b3f6be563666
SHA256

50d7d488a51701eb4b55d7e6142e8d461d8004a27186dc9f6ec46dd7cee75153
SHA512

a976ca60f7bab3b83099117e2e321be0d12255505feec4b1de4323f82ac07db30db76d0cfc8b30b17488399ad7a1cecba1c92e8cb3db99a1dd588ffe04d2d10d
SSDEEP

1536:Jf5fLSGKm8Ombnqi5NLnC5ah1reqdAu5hOj6dwLMt6kc:PfLB8OmbnpDrCs16yAQOmm06/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcdfc65c49a6613dc7e15d80c9c776e7_JaffaCakes118

Files

bcdfc65c49a6613dc7e15d80c9c776e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 63KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE