bdf46ac88c55088768b9f662eb205cb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdf46ac88c55088768b9f662eb205cb7_JaffaCakes118
Size

104KB
MD5

bdf46ac88c55088768b9f662eb205cb7
SHA1

56260cb84da6f7eb9e17be36b87ad171e3aeeaf0
SHA256

aa1f1923aa157f39c656dc2becca709643eb46b3a78075b213adcb07da5b025d
SHA512

89663d2080d806572a7a37a6b394107f58993bf82466ca89429333b87cb45d45ba90608cde5574d052abb6e9626f872c0b44109984160a07608803c8ce6800c2
SSDEEP

1536:Cr0vpoH9gsbzAh2G/y9diANRiMsMW9FkAWJefXS:m0BodgsbUY/iANwMsTFzWeC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdf46ac88c55088768b9f662eb205cb7_JaffaCakes118

Files

bdf46ac88c55088768b9f662eb205cb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

076e05fd81e85cb96464fb465e82fd49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcmpA
lstrlenA
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetStringTypeW

user32

IsCharLowerA
IsCharAlphaNumericA
IsCharUpperA
MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ