bf6e6e44a71373332d3e4c83f2258693_JaffaCakes118 | Triage

Sharing

General

Target

bf6e6e44a71373332d3e4c83f2258693_JaffaCakes118
Size

101KB
MD5

bf6e6e44a71373332d3e4c83f2258693
SHA1

2affc66676f3ec7775a4ffacbb664a5a64ee8060
SHA256

72c7605f0e0a731bd81772efdab55da9f3c026217871ba7b8832a06c108214e8
SHA512

103bdf7730ea918d08299e50f70cde76959965ba09bb26c437f23138dc8a46f4c0a38e8ab1e7ff42d14556ec5d2160f3fd93c014b56fd3d112b328e8099b18f3
SSDEEP

3072:WJ6dMMfkqGIlxvu/JzMejSO1sJ6CaKMFFk8jwaaHw7Koj4r+:JdMITlD2SOe05HF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf6e6e44a71373332d3e4c83f2258693_JaffaCakes118

Files

bf6e6e44a71373332d3e4c83f2258693_JaffaCakes118
.exe windows:65535 windows x86 arch:x86

2aa46220ae2b2ee3f38d6efbb8b16a95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA

msvcrt

_initterm
_except_handler3
__set_app_type
__setusermatherr
__p__fmode
__p__commode
_adjust_fdiv

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE