bfd6449d6c8800560d406105ccba7130_JaffaCakes118 | Triage

Sharing

General

Target

bfd6449d6c8800560d406105ccba7130_JaffaCakes118
Size

115KB
MD5

bfd6449d6c8800560d406105ccba7130
SHA1

8bb8138f01d20295757dbace63c2180f91205100
SHA256

2e35d812cac6322afb84ee227123268efb3aec59f8d8a13ef59a0f7fbcb3eae1
SHA512

59c1f3e433d89c423f618b6af304f1f622fea3250abec9d4338ecb9c7634fbf81e55f7419125e00985335cfe98ba3dc0dc8b888c56d8293a03158e9a3b340bba
SSDEEP

1536:qzvGfL5WbebX15xgxvyumifFoPnZtlbAGG4cF/1NCZm39VoDvuoIuGoRhQjEw:4GVWb0nxgqIyPn1AGG4cFn/39VyzIuYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfd6449d6c8800560d406105ccba7130_JaffaCakes118

Files

bfd6449d6c8800560d406105ccba7130_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d2785da57db56f679bab39f14c59fd69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemRealloc
OleInitializeWOW
HACCEL_UserFree

user32

CloseWindowStation
GetWindowRgn
DrawFrameControl
DrawIcon
IsRectEmpty
BroadcastSystemMessageW
GetCursor

gdi32

ChoosePixelFormat
GdiProcessSetup
GetEUDCTimeStamp

kernel32

PrivCopyFileExW
VirtualProtect
ReadConsoleOutputCharacterW
GetConsoleAliasExesLengthW
LocalShrink

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ