bdc1ef91e9e2c4917c98fc68aa60af43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc1ef91e9e2c4917c98fc68aa60af43_JaffaCakes118
Size

64KB
MD5

bdc1ef91e9e2c4917c98fc68aa60af43
SHA1

2896a48f74d35838bbc2ba4a5ed9f6e707bff01d
SHA256

19000cba7a17ad5b8b8b2792e9bd61f92638d7e1f0f88c7e8b6e80f178c3ec3a
SHA512

77a9dc19f2f5ffbf9b7bf8642f93e4d97de05c82991800dcb8ad124bee624d469d4135859bc622b403b61f018349bb2dd2268c696409924b3a35513090cfb0cb
SSDEEP

768:MjMsMCMsMnMsMCMsMCUMsMCMsMnMsMCMsM:r5X5M5X5Cx5X5M5X5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc1ef91e9e2c4917c98fc68aa60af43_JaffaCakes118

Files

bdc1ef91e9e2c4917c98fc68aa60af43_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2ba629f434c3ca1b21fe81af6412d628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
GetFileSize
GetModuleFileNameA
GetProcessHeap
HeapAlloc
HeapFree
ReadFile
RtlMoveMemory
SetEndOfFile
SetFilePointer
WriteFile

msvcrt

printf

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 795B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE