bf059dfe919ee19dc64578a48cf491f8_JaffaCakes118 | Triage

Sharing

General

Target

bf059dfe919ee19dc64578a48cf491f8_JaffaCakes118
Size

115KB
MD5

bf059dfe919ee19dc64578a48cf491f8
SHA1

708597263215ae50e6e7771d41a91a1d848c8702
SHA256

aa4850a06b9d83384d0806ce2bb066bdfcc2b002f374400ecb6c66e6b33082b9
SHA512

9df2108e73623b733da37198aea60e5fe3f62353cd6eb31ecaf876a358ad8922b86de4e3b87b1b43238490184b4465c3ee8788221753325a3dd36303778f844a
SSDEEP

1536:SU5wthlBvqUuV7UhZ2NdSfFdhl/SP6dfRiXaecN5F+hz2HodWmI8QF:xqBhjUghl/SP6d5iXaBrEZv8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf059dfe919ee19dc64578a48cf491f8_JaffaCakes118

Files

bf059dfe919ee19dc64578a48cf491f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2f7607677c93ab1a1a08587f1a65e88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow
CharNextA

Sections

.text
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Lsvw. Dm
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Mjmnm Bn
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Jysaijxv
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 233B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ