bcd4542bd8ed4f3e1f5a7d1261bc276e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcd4542bd8ed4f3e1f5a7d1261bc276e_JaffaCakes118
Size

1.1MB
MD5

bcd4542bd8ed4f3e1f5a7d1261bc276e
SHA1

689375c54ee61b9511e66b1dc9aef6b236aae979
SHA256

6c0653b85c1fb42981981a1cc2ab510cf8ee6c99079c289c7f14332bdfd00153
SHA512

d112ae429d332ebea26de8bba317fed65babb6d5c183ba01204f09ce5c6043722056de8fc1c7ccea6c33e442a4dff2a02f5973f31917bcefde2f677ebb7062a2
SSDEEP

24576:JMK5jyhX7hkp3s9lj6z42FjIGp3Qi3SXNvxu+9+ux20AJ3xw:bJyxK+rZ2Fjh3QWGvIk+uxWVS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcd4542bd8ed4f3e1f5a7d1261bc276e_JaffaCakes118

Files

bcd4542bd8ed4f3e1f5a7d1261bc276e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1.0MB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ