bcf770b6a349302dea9b15d2c393cf77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf770b6a349302dea9b15d2c393cf77_JaffaCakes118
Size

63KB
MD5

bcf770b6a349302dea9b15d2c393cf77
SHA1

ac995a4a9287bc1965e07a0adc210c95aa210f2d
SHA256

0f9d80d25e63d941af34dfca668e513659427bef3bb6737ecee5349100b4ffa1
SHA512

86042ba90a3e085e401532de2285f99615b930f16ac0487d64c2c28ca40a490460bfbe18d6cd03dd1eddd16dd642d5247a2664904cf3510cb8fa4ab7aade2f33
SSDEEP

1536:vVsNV8kOI/lVTmYrkPndroWcyrC8wnOgd9E4Jbq/qWwAW9:tE8aPJrGndro0C8id6gH9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcf770b6a349302dea9b15d2c393cf77_JaffaCakes118

Files

bcf770b6a349302dea9b15d2c393cf77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aef907ca960424bfee09a5ae4582f1b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
VirtualQuery
WTSGetActiveConsoleSessionId
GetVolumeInformationW
MapViewOfFile
CreateFileMappingA
GlobalWire
RestoreLastError
lstrcpynW
SetProcessDEPPolicy
WideCharToMultiByte

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE