bcc30e74330e78e0ec612c0330df6e65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcc30e74330e78e0ec612c0330df6e65_JaffaCakes118
Size

35KB
MD5

bcc30e74330e78e0ec612c0330df6e65
SHA1

abe8333685a70884553187f8ffd6a2695c7a0050
SHA256

6bafdc2e0a86ffdc8bf82de72d520e136e22a2a00e443de70de589b4fa5ed46a
SHA512

ed33c4f826a3301703df7f32be988b3fac629e2ae2fadc9cd4e96c16bb6bc0d10b3db8d0ca8cc1013f095203067fc69a72a588d8dbfb373fb5d1f9a2f259c166
SSDEEP

768:WdNgLKzJ+0zueFBpWHYTCYe+NtvhaoLMpd:WdD/N0QCCrhZM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcc30e74330e78e0ec612c0330df6e65_JaffaCakes118

Files

bcc30e74330e78e0ec612c0330df6e65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16855e60e217840ee03872c3b6bad323

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitThread
GetModuleHandleA
Sleep
VirtualAlloc
lstrcpyA

msvcrt

_wcsicmp
malloc
srand
wcscat
_except_handler3

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ