bf29178ca1a859481bcc6df0f01f4c4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf29178ca1a859481bcc6df0f01f4c4b_JaffaCakes118
Size

85KB
MD5

bf29178ca1a859481bcc6df0f01f4c4b
SHA1

dace4e7ccd24d17319a6aa5cff26300d9dc09098
SHA256

b67405081369977f3eb474cadab1e68eeef2fb9e44a39da6491754de8b1e48fc
SHA512

6f30e07a0899d1e53d69aa3de9500d678f8e8d83470662878bf70541a6b108ec4a9b29e58d80783b488eee5eaab041e8ef32fb8eee971e4cf870b21d405b2d73
SSDEEP

768:iztGV5nO4rGQzTGfqc33emu4v/eo4z7VP7LdGSu2HyTAzfMgTAzfM0CA2A7qc86C:iz5Qhd54vAAUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf29178ca1a859481bcc6df0f01f4c4b_JaffaCakes118

Files

bf29178ca1a859481bcc6df0f01f4c4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17a6461f5e891f0bc2aad2ddbaf03ff6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
_lopen
CreateDirectoryA
GetTempPathA
CloseHandle
WriteFile
LockResource
CreateFileA
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetStartupInfoA

user32

MessageBoxA

msvcrt

sprintf
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ