bfd55622b80f8cc4f07588ea7f8accad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd55622b80f8cc4f07588ea7f8accad_JaffaCakes118
Size

612KB
MD5

bfd55622b80f8cc4f07588ea7f8accad
SHA1

a519dc85c33aee60989ef60d74b257d5c23d9ad0
SHA256

c10a0cc247c30a9ba7134a77c5914d0afe6c326eae8aaba53abfe4c986a8ff70
SHA512

17a2bdad905b3ac8c78a40a2e47e294b6d03d771071a5fd5ba82ebcbefe5d7c9bf9a599bd02f59aab3f6eeb7dbf94b097fafbc07e25e6fc0407a13d2d24dbb2e
SSDEEP

12288:w1Bv/rhxvhLR4JUnFNIQz0mSSwW2rKdrsQvS8edicgS:Snrvu2LPz0mSydrudicgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd55622b80f8cc4f07588ea7f8accad_JaffaCakes118

Files

bfd55622b80f8cc4f07588ea7f8accad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ