bf59374f40a194ba0d838c6a8943d3c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf59374f40a194ba0d838c6a8943d3c9_JaffaCakes118
Size

6KB
MD5

bf59374f40a194ba0d838c6a8943d3c9
SHA1

7fcd003ce695f0bd7822911dd801b606b323d03d
SHA256

29eb388d3dd83cf0e4bef30b355f793d6debb2407829cd099ff951b5301d7aeb
SHA512

cb3c89fb1654f3020eee04fd940c27f102e45e87eab7e611f0777f0b078cc6e1b80f191664e256d59b62024486f916449c54d0953e5ef46217864f739946652f
SSDEEP

96:cS7jH4T4rOsq1t8GBMkQIKAWsI6+qEQdYKeZ2xMMNlcpqOyuP4m:cSnPOsq7BMkdWLRKqZ2xMMNN+PX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf59374f40a194ba0d838c6a8943d3c9_JaffaCakes118

Files

bf59374f40a194ba0d838c6a8943d3c9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

72ceb0cbf6000bfc508ffa5a3a2f917b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_cexit
__p__fmode
__set_app_type
_controlfp
_except_handler3
_XcptFilter
_exit
__p__commode
_c_exit

kernel32

GetModuleHandleA
MultiByteToWideChar
GetStartupInfoA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE