bad62b9285ab844b1b023e65d618bbd9_JaffaCakes118 | Triage

Sharing

General

Target

bad62b9285ab844b1b023e65d618bbd9_JaffaCakes118
Size

409KB
MD5

bad62b9285ab844b1b023e65d618bbd9
SHA1

e04095e1074b8bbe358ccee17239e0e9a8f80342
SHA256

0a258b44d12a5b1303d6e92cff7448b8b5c6d9972c76f0c7fb97fce0a0997bdc
SHA512

fa1dafad2b6780e9ff6fe5512dc77c51488df4d57079a37223f1660b95326c9c952113d6641897f6bafdda670cb2455230393adaee357b633e94c0c0727fed43
SSDEEP

6144:xj8dKd5kxmwgf6954JAs2SEUMIfX2rxJKSRVowzgK8YxFv7yRCfnVBEMWI:bd5kYwgf254Ks/h/2rxJKSRVBUSsa3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bad62b9285ab844b1b023e65d618bbd9_JaffaCakes118

Files

bad62b9285ab844b1b023e65d618bbd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb863511ecb4e025ef3c40c2a305caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvbvm60

ord517

Sections

.text
Size: 403KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2qLXjd20
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ