bfdca1b4608531f5011317e8dcbb8e7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfdca1b4608531f5011317e8dcbb8e7f_JaffaCakes118
Size

44KB
MD5

bfdca1b4608531f5011317e8dcbb8e7f
SHA1

9e44842357ce8197d683c4a9c9d773cfb50aea4b
SHA256

fdc81fe9f0d9060f99eb25fffa1774801323bc4d17700bf266a13bc4121263e4
SHA512

71b4ab07d82c6abe9f30d2fb8fa08ae611f8f1fd1919351896f95d3865d17aa803886c561b47e0118fe1c6a219561d911803e0fdce984d556b0d04fd84f9014a
SSDEEP

768:hfe12yw6uKzJ6nKiVOaS2VqL1JBrCl47e+XVTB7a:o12yw6uKzJ6nKiwaSyqL1J5i47e+Xa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfdca1b4608531f5011317e8dcbb8e7f_JaffaCakes118

Files

bfdca1b4608531f5011317e8dcbb8e7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 10KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE