bfc6bda76061e81209d557bc972758dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfc6bda76061e81209d557bc972758dc_JaffaCakes118
Size

18KB
MD5

bfc6bda76061e81209d557bc972758dc
SHA1

1e321bfe4f90e69c6ff5d8bc4271df53fa426aee
SHA256

73666dc03869445a9b08c38f7a7362f2eda6709874605aa83a89ceae7876a95e
SHA512

8defa9e065b5c7589d9f8c2c3cdb4765f78f6252991362e20245b5733a927a9bfbe0ccaf131ed323f2de12e0d15fc0a5880f6a4a53a35b1ad41eaeb5a86d8832
SSDEEP

384:Vk+KDzz3vakCb4U9NTxq+dOYOHMZpLr/Qb24p3pAfO5:ijz/akc59NTo+wMZlr/Qb24pifW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc6bda76061e81209d557bc972758dc_JaffaCakes118

Files

bfc6bda76061e81209d557bc972758dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1e6b9b4c72d7e5d2d0b7c4900fa90c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zM69CJD0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ