bf94f78de6133b74be57a26b4d47a9a1_JaffaCakes118 | Triage

Sharing

General

Target

bf94f78de6133b74be57a26b4d47a9a1_JaffaCakes118
Size

9KB
MD5

bf94f78de6133b74be57a26b4d47a9a1
SHA1

4e299a00a79e454a483a094626a8185b477ca2dc
SHA256

4a7f2b941395a779738fbcc43eb301560547a106f657970e1b7ab5794f06dc6a
SHA512

380ba9610dfd732368dac932ddc4fc4891c4553a39f5d231445a1cc1350d07d8a976f91f3a5c3ff2b5fc70554fff9edd1319ce5b6132aea3d00b301ba3fa5e59
SSDEEP

192:7hl/giSG5XK8fQQMnrYt4wPXY687OJqZ6lq+WQonxVIi1/v:LgiSEKGQdCbT/2VIihv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf94f78de6133b74be57a26b4d47a9a1_JaffaCakes118

Files

bf94f78de6133b74be57a26b4d47a9a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1aa49d7b8ea973844a9173710bf62c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleFileNameW
WaitForSingleObject
CloseHandle
GetProcAddress
WideCharToMultiByte
lstrcpyA
ExitProcess
GetModuleHandleA
HeapFree
HeapAlloc
CreateEventA
CompareStringA
Process32First
CreateToolhelp32Snapshot
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualAlloc
HeapReAlloc
SetFileAttributesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE