bfd493797a1ef00e51a27b9cb5bf6677_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd493797a1ef00e51a27b9cb5bf6677_JaffaCakes118
Size

71KB
MD5

bfd493797a1ef00e51a27b9cb5bf6677
SHA1

32eb96c86587c44e78d4cd2e18bf1c30cdc00ddf
SHA256

def9e9ec13d78c3edc6f1e6ebb627794391aa1a0d0505c019b0d1846535fa757
SHA512

95fd6f9066b9ed15326e96732e193c925c04208d658aa355f2544276d3bed2fd256188263d2e3f9e4d27a513ea0e4a88bf7c8638a47729222e66a21e395bd5d4
SSDEEP

1536:1jlwLVwJ3703Ij92zY2pGos9/Y0oBid+auRvnaZ8Uum:1jSuJQ1Y2v50oQEk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd493797a1ef00e51a27b9cb5bf6677_JaffaCakes118

Files

bfd493797a1ef00e51a27b9cb5bf6677_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6912ec3cb861566222ba655437dd4cfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
iswctype
_snwprintf
ftell
fgets
strtoul
strcpy
_strcmpi
memcpy
wcscmp

kernel32

ExitProcess
GetTickCount
GetCommandLineA
GetModuleHandleA
GetVersion
GetModuleFileNameA
GetLastError
GetCurrentThreadId
LoadLibraryA
GetSystemTimeAsFileTime
GetVolumeNameForVolumeMountPointW
GetBinaryTypeA
GetDiskFreeSpaceW

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ