bcf0b89ac96d52dc4ca15175beeabfd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf0b89ac96d52dc4ca15175beeabfd1_JaffaCakes118
Size

56KB
MD5

bcf0b89ac96d52dc4ca15175beeabfd1
SHA1

958a2f2865fab7e209c5a69252dc198368ef32e9
SHA256

595330a46cef251e69dae60e27806e85f2760a073d215b6c26567f6bdf0e896a
SHA512

f6d5bc257cc12eac5ccff7dd31e4224336b34cd4f4b5640457acf9807ab94654edd377ede654af9ac31328c601efa561b4e9963370d1a54b1497081f797f95e9
SSDEEP

768:Rwaou4Xj3N3NkYgupPkHzvfnaMJ4uEGJz2sB9A:iDu+j3RNkYgupPkn9/Jr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf0b89ac96d52dc4ca15175beeabfd1_JaffaCakes118

Files

bcf0b89ac96d52dc4ca15175beeabfd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98f2eb9fb7bd6556bbf29ac4920c5a0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetStartupInfoW
TlsGetValue
GlobalReAlloc
lstrcatA
GetAtomNameW
GetDateFormatW
CreateProcessW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.megrsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ