bdde874b48ce210a12d5f2097fb5e08c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdde874b48ce210a12d5f2097fb5e08c_JaffaCakes118
Size

16KB
MD5

bdde874b48ce210a12d5f2097fb5e08c
SHA1

984809ab1b7278b6d36d4677f6168cf55a409f89
SHA256

7143019e84f0ab02f86f9daf356c98cd7b43741f1e6cc944cefb9c5a1307e670
SHA512

d70f5ce186f0e68096d7d9503ad9f9cc795cad1bfa5d9f9a780e173c0519423b4cffbfaa07c9cc9e7aa2f73ecf480ad1f56be1766f999b3d1feedabff6b79f17
SSDEEP

384:BG2UYRsQlUOMgV73cmQp2yvI+Ro6xdYDTxTgfK:g2fWEMg9smQpzvIefxdsTuf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdde874b48ce210a12d5f2097fb5e08c_JaffaCakes118

Files

bdde874b48ce210a12d5f2097fb5e08c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 9KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lxd
Size: 64B - Virtual size: 64B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE