bcf6f26aafb56884fd9938e443f26842_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf6f26aafb56884fd9938e443f26842_JaffaCakes118
Size

362KB
MD5

bcf6f26aafb56884fd9938e443f26842
SHA1

766d9b00b30104281445dcf03c1239bbbdb00c34
SHA256

7edd3922021779577b3c49e1824924ab2e814c27ef61af227e82708a32d0d94e
SHA512

8d2dff85e39b55c51f53762fd43f70d34dd2f1e85ea3756f732e176253b5200e5ec286ac98426a496ba9a1e728f365b988442c4e03658978489b0a19b772a2c8
SSDEEP

6144:IT25ShKr1YKsI5oIiTLtcWiOT3aAmWB8DMJm/XndG9WKnhY/+2l25jxbHHrKknfj:IqYhKrekF3OLaAmWqBchYm2l25jxDLKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf6f26aafb56884fd9938e443f26842_JaffaCakes118

Files

bcf6f26aafb56884fd9938e443f26842_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5a9b1bd6c1255e4a5d941f7cf011f1f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsChild
IsWindowEnabled
PostMessageA

kernel32

EnumSystemLanguageGroupsA
GetFileSize
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetCurrentDirectoryA
VirtualAlloc
WriteFile

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE