bf970dc3acacfb418d62a83f10beb9a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf970dc3acacfb418d62a83f10beb9a0_JaffaCakes118
Size

15KB
MD5

bf970dc3acacfb418d62a83f10beb9a0
SHA1

c68f54c97643df486e795ec1f55fcc167bdc3bac
SHA256

2f7403ed35c1faa2dc85e8f17bc0969213940c1ebeb58a41d81f4accb0c99aee
SHA512

a8d0c183ea5842d9680fae053f276a9b8109e950ef5d0111c1469b9df552ce963f9f4bb9a82cce6d6b40d194f03bbbb80385993abede7ed5bf5f663efc535865
SSDEEP

192:JOHePl5KmGaAHuEsSEqeCxVw9QCWA0Y24WDapUW781gW:JO6BzxCg9QCWKWDaOW781gW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf970dc3acacfb418d62a83f10beb9a0_JaffaCakes118

Files

bf970dc3acacfb418d62a83f10beb9a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db507a75104ab46b1251b28ef400b482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetLastError
CreateMutexA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
wsprintfA
MessageBoxA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ