bf386b3c9e38df1958b286fd067c4201_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf386b3c9e38df1958b286fd067c4201_JaffaCakes118
Size

6KB
MD5

bf386b3c9e38df1958b286fd067c4201
SHA1

0638af5c1fda22e62f727532137a4ca7f34a8337
SHA256

5a625568f2d80eeaa639bf3a6dd62fd5c5ef39698763f78d2c36b05376d4b261
SHA512

2fa85132b59300aea41939ecd69e4b4dca78269744a8b31d329d925008f3895741dacda6335d5e22a6aeeb87ef2757aad071d49c1a919d7d3384370622f305f7
SSDEEP

24:eqGSIl/oaK9LGS02FlDLle09vwAesB8WI1WvJ6M/agnIKHR+lYEi8L9tNSSSKEKf:nKh2bLlh9YsB8pg6saU5xaJlPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf386b3c9e38df1958b286fd067c4201_JaffaCakes118

Files

bf386b3c9e38df1958b286fd067c4201_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69ff826df7a70587e81db977c723ef6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
Sleep
CreateProcessA
ExitProcess
GetFileSize
_lopen
WriteProcessMemory
_lclose

Sections

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE