bcf64677df1e02e4dd78aec2a97bd04b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf64677df1e02e4dd78aec2a97bd04b_JaffaCakes118
Size

160KB
MD5

bcf64677df1e02e4dd78aec2a97bd04b
SHA1

42dc81d24b946ef129aa583b64e97301cf975330
SHA256

b3913b253e87299f39d532627d3de938974a179cd7e0bf7faf37dca48fb49697
SHA512

fca8d60f6f348ac82a1061df12d8c04dfc2e1ac25a45f9f57bc1908929b172e836bc64f7f44158ed6419c80a3b1982db466b9e74036d9447edf486c6a8687435
SSDEEP

3072:JZ5ithgkqcXHu+IO2eEf2uzw+gnbuqZ0N9VLBKQR:41MaCNwpu+i/LBX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf64677df1e02e4dd78aec2a97bd04b_JaffaCakes118

Files

bcf64677df1e02e4dd78aec2a97bd04b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea8060fc7abb6306452099ad8a1628ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetStartupInfoA
GetModuleHandleA
GetProcAddress

user32

wsprintfA
RegisterClassA
LoadCursorA
LoadIconA

ws2_32

inet_ntoa
gethostbyname
WSAStartup
WSACleanup

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_strrev

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ