bfa8bd4c0d5dbd7f9d6adbf2a2ebfe29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfa8bd4c0d5dbd7f9d6adbf2a2ebfe29_JaffaCakes118
Size

176KB
MD5

bfa8bd4c0d5dbd7f9d6adbf2a2ebfe29
SHA1

75c7d3f0b81265b30a90f8afbabeeb1016ebd703
SHA256

b6e0a4734d5d0c4c10dec0ea1025ad844c841bfe1bc7c3bf12b3a094f57cec52
SHA512

6b4e191000d952ff202c996dfcf1d45632834292024df0766fb180474b98892b001c7798437e8cf8d51cc768460fcb7bc7fc57527da5fb2859034a8ece1beb8e
SSDEEP

3072:3QanqDeo6fXBHWDvImrf2VRaG7s6wjTCz/nGToaKhcX8jWj:3QIqDedxHsvIs1Gfyw+DKhcX8jy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfa8bd4c0d5dbd7f9d6adbf2a2ebfe29_JaffaCakes118

Files

bfa8bd4c0d5dbd7f9d6adbf2a2ebfe29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7455e2ed1968a3b0bd8505ec9fb3f7d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord860
ord2915
ord2614
ord6648
ord800
ord537
ord5856
ord6663
ord941
ord540
ord823
ord6877
ord825

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_XcptFilter
_exit
_except_handler3
_vsnprintf
__CxxFrameHandler
strstr
exit
_stricmp

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
CreateThread

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ