bff3ceca390a0a1d012b5c6f2eeb45a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff3ceca390a0a1d012b5c6f2eeb45a6_JaffaCakes118
Size

57KB
MD5

bff3ceca390a0a1d012b5c6f2eeb45a6
SHA1

43dbdb4f1912ace39fa2a0c316cb2a052120eb78
SHA256

5a228cb7488a37962507af6a088fc21d14dbd2fc226478cda64074a0bfb491c9
SHA512

cc150fd39184c86ccbe86275c4398bcb75c858d9da006eed5070c1ab126950394539ff42d2ac1d0414d8650b9d38f0f25ac5e38056532f1ef535aa7c55e82bed
SSDEEP

768:vVOpxAatjquEZrUpLlb8551EgVXI03BN5TlwdbptjJ:0dtjquEZYBlbWXtN5udbnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff3ceca390a0a1d012b5c6f2eeb45a6_JaffaCakes118

Files

bff3ceca390a0a1d012b5c6f2eeb45a6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

f45c7b3c4b95454fb84eda37ae82256c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
MoveFileWithProgressA
FillConsoleOutputCharacterA
CreateTapePartition

Exports

Exports

ccvaznrhr

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ