bf20668319a362bc5889b31b6574c131_JaffaCakes118 | Triage

Sharing

General

Target

bf20668319a362bc5889b31b6574c131_JaffaCakes118
Size

97KB
MD5

bf20668319a362bc5889b31b6574c131
SHA1

232ad23213c51fb7ea812adfc17c5e2d96755c9e
SHA256

b0215daa729d6d75384f6563b5cda174005e8488e79be5ad0e9c2e4fec88bf6c
SHA512

6c9f977e53339846fd36278477926044a360da3d6ca1215419df7e6eba84a0a4c8474c50466accca8ee57a3cdbd9906ecb68995697937487ad1f19d467fc08c8
SSDEEP

3072:uxXegqr9jqTfTPbsNQRom+qOUKk2yV5+k8DQtTePHBA:AgqdFn8Ph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf20668319a362bc5889b31b6574c131_JaffaCakes118

Files

bf20668319a362bc5889b31b6574c131_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2f13a1c7afa57cf2f5faf999d25447da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent

user32

SystemParametersInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ