bebc8e26fda5ff0775e771b5b5e20e3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bebc8e26fda5ff0775e771b5b5e20e3f_JaffaCakes118
Size

24KB
MD5

bebc8e26fda5ff0775e771b5b5e20e3f
SHA1

76635470302f4cba68ed6adbc2d28e222ef4ed83
SHA256

ccbfb78b77bdd6d0d87bd78246741da12eaf8622a4b939b5fee6ea5956ff1512
SHA512

919fe8db72b0d05e933f6338e8a7a056c30ae82aa31477cf12b2e743a95e88ab1e394b4d1d807bbc11b34d71eb9db43e6e7a4c8ab3867d1767d063189784ed8f
SSDEEP

384:TBGNkTANiR2LVoGmz2iJcNCM3V4jnJFp/ql/0ZvhgQ35UdxloVaY:TBGGTAVL5620MFana0ZvhgQ3inl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bebc8e26fda5ff0775e771b5b5e20e3f_JaffaCakes118

Files

bebc8e26fda5ff0775e771b5b5e20e3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

174f62f6a3c47061840e2da0a0683c54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrlenA
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleFileNameA

msvcrt

_strdup
strlen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ