bf84663f30992f7365efac0c6ebc6e47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf84663f30992f7365efac0c6ebc6e47_JaffaCakes118
Size

48KB
MD5

bf84663f30992f7365efac0c6ebc6e47
SHA1

19df9fbb8b9c7e6cc30271114c9f1e526b51fb99
SHA256

e77288caa8196e5f1b03372b78f9858cae605ea1c88550fdbe5d2cb8e0d9ed66
SHA512

95cfbf0e4bd09c281fd5428d705cf4e923dc0cb466510e77d9eb31d72e9aabd7fcdd809db983cebc5757b572887007a53c8be37fad1eb336c67b114c703867df
SSDEEP

1536:vVCqsxSYK6cz0iUNQ7ILruyL5bHFBclBeZnF6d8+:vVtYiUesLrus5jFmoF05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf84663f30992f7365efac0c6ebc6e47_JaffaCakes118

Files

bf84663f30992f7365efac0c6ebc6e47_JaffaCakes118
.exe windows:0 windows x86 arch:x86

e8933a13406ed4244fcc3ea36bbb818f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
FindAtomW
GetLocalTime
GetDiskFreeSpaceW
GetShortPathNameA
SetUnhandledExceptionFilter
GetVersion
ExpandEnvironmentStringsW
WinExec
GetVersionExW

user32

GetClassLongW
RegisterHotKey
MessageBoxA
SetWindowLongW
GetClassInfoExA

gdi32

CreateCompatibleBitmap
GetStockObject
SetTextColor
GetDIBits
TextOutW
CreateDIBitmap
CreateFontA

advapi32

RegOpenKeyW

comdlg32

GetSaveFileNameA
ChooseFontW
FindTextA
GetOpenFileNameW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 901B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ