bf80bb4a2138bd4fca683169f8e2ca64_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf80bb4a2138bd4fca683169f8e2ca64_JaffaCakes118
Size

18KB
MD5

bf80bb4a2138bd4fca683169f8e2ca64
SHA1

7e957464647365f312c55ccce91fc28517795950
SHA256

38275c82e0701dcab0b8e0cb6bc1eb60c28dbaa1c28d8d350cb25d6df527e6c2
SHA512

ff1feb5adb8cee88de056574623cd5e0dc01a7d89e896472ce6a69a08943e35b8df4033a22c6c7b36b365ef4a096e8df060606a2a5bf58597133328d0b216a98
SSDEEP

192:GovVj/IftykHeSTzKFYo9WB7MDH7h9Wm7Bh/SXfHWefHiyT34fTqxht1dqihO93x:GMtYeOzR4DHSe4fBqyT34fTU1dqqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf80bb4a2138bd4fca683169f8e2ca64_JaffaCakes118

Files

bf80bb4a2138bd4fca683169f8e2ca64_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ