bdd9589309a03f67121f8a0574172574_JaffaCakes118 | Triage

Sharing

General

Target

bdd9589309a03f67121f8a0574172574_JaffaCakes118
Size

408KB
MD5

bdd9589309a03f67121f8a0574172574
SHA1

04578b928d959782b2d20a223fc0771730a5d6bd
SHA256

4e329df8e0b3cbc03e3cf535a013b6e0523ce3db12b1c278bcf814a01521a443
SHA512

196be9d9610453696254bbe1d0d287bf3982e075c9bb77a45902bf01252e33975c7c2a02fb8a70fcd7d33394a9aba47afc1e5a07604df42bf59683a00705e9f5
SSDEEP

6144:S4bKv0D533guGPAVe8X684PbrnXK2Vinm8TdL8nXryxLxw7RxHctLuviFB:SSN5SOe8XZ4jjXKYn8Je+olpqFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdd9589309a03f67121f8a0574172574_JaffaCakes118

Files

bdd9589309a03f67121f8a0574172574_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a6ec36482eed9b54eeb5b9beb737be9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
TlsFree
CloseHandle
MultiByteToWideChar
GetCPInfo
GetEnvironmentStrings
GetDriveTypeA
QueryPerformanceCounter
WriteConsoleW
HeapReAlloc
GetCurrentDirectoryA
SetEndOfFile
FlushFileBuffers
ExitProcess
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_strcmpi

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 392KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ