bfc260ab022065c53af7258c8baab79b_JaffaCakes118 | Triage

Sharing

General

Target

bfc260ab022065c53af7258c8baab79b_JaffaCakes118
Size

275KB
MD5

bfc260ab022065c53af7258c8baab79b
SHA1

f57be9b01895747e789e2c5eae0d392923214031
SHA256

bc1259e5265956b156edb0d6df6c1fc69994d49767c0d322d813c82b8893e9ad
SHA512

2ef8399bfdda65d2bee9f15545314d27f9966a1b0702909c482a3a08baf1254e4403ad3df39f0dcc99816f73af3e481379731d34835282937186742e43305525
SSDEEP

6144:oI4sf6JbyJcaUBjreAeVdIR0OTpmP3t0F8V5pcP9:oI4syJ/aurenIeVJ5I9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfc260ab022065c53af7258c8baab79b_JaffaCakes118

Files

bfc260ab022065c53af7258c8baab79b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

019fe6ef680aea56ad70fe217b8659f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetSystemMetrics
GetDC
GetDesktopWindow

kernel32

CopyFileA
GetLastError
GetConsoleOutputCP
IsDebuggerPresent
DeleteFileW
GetTickCount
GetOEMCP
GetThreadLocale
GetModuleHandleA
GlobalFindAtomW
lstrcmpiW
GetProcessHeap
VirtualAlloc
LoadLibraryW
GetACP
DeleteFileA
RemoveDirectoryA
lstrcmpA
lstrlenA
Sleep
GlobalFindAtomA
GetCurrentThreadId
MulDiv
lstrlenW
GetCommandLineA
GetCurrentThread
GetCurrentProcess
GetWindowsDirectoryA
GetUserDefaultLangID
lstrcmpiA
SetLastError
GetVersion
GetCommandLineW
QueryPerformanceCounter
SetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleW
GetCurrentProcessId
GetDriveTypeA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ