bf7e6d1bce11b3a0d075f7a1eb68c0ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf7e6d1bce11b3a0d075f7a1eb68c0ff_JaffaCakes118
Size

6KB
MD5

bf7e6d1bce11b3a0d075f7a1eb68c0ff
SHA1

b44311a1bdce569291dc007d381ef218cdd90c3a
SHA256

1e8403033d4a7754b69359ca7116b0f774ba468bbfbdd0d84a21fda739f7aa06
SHA512

e0a47e959a96d32350ccbe02caa03dc0ab5ba10564de5edbc0594a21715e9960bb785a3ad9a2011db4cdb5588727a71917f57c5f9cac92bf1d86c3beba455dd7
SSDEEP

48:ZvtczW/Anvhe8Mxbmu5EdibmuYmqQQUGWScHtPoLLSduvfEAMoBAOn:Z14dVMOdGqQbGWScHtQ6wHEcK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7e6d1bce11b3a0d075f7a1eb68c0ff_JaffaCakes118

Files

bf7e6d1bce11b3a0d075f7a1eb68c0ff_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0ae8fb7966ca3f44ef5bf1eddeb1c738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA

kernel32

CloseHandle
CreateFileA
CreateProcessA
CreateRemoteThread
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
ReadFile
Sleep
VirtualAllocEx
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrlenA

shell32

SHFileOperationA

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE