bd0802393b51f7b88fd1caf18cfb9d59_JaffaCakes118 | Triage

Sharing

General

Target

bd0802393b51f7b88fd1caf18cfb9d59_JaffaCakes118
Size

79KB
MD5

bd0802393b51f7b88fd1caf18cfb9d59
SHA1

dfca89f012d85280a32517e8541ce219dbc1cf84
SHA256

f42ee437ef9c0ca78a4cead554f84704b79b9092284db57923f5a480c3ac0065
SHA512

3c5ac1a277ace1e98052968f02a8e724327146c6b9c9aab73f6a594b43bc5a40f7200e6e15d69abd43a8b2db932c53ee7df44fd8ba42f7ab73685b93f900bb2d
SSDEEP

1536:GVodbBqHbWtYEmf7OuP6Bm4PERnDq/r/YFRwEdH8N2Ss/2kNSjAnJgzb:GVGNQrEmf7Rh4yYGSK8/sekNSjAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd0802393b51f7b88fd1caf18cfb9d59_JaffaCakes118

Files

bd0802393b51f7b88fd1caf18cfb9d59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

329f7ddb4e48e57a63acf5d0d05e7cb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
GetMessageA
DispatchMessageA

kernel32

GetFileSize
VirtualLock
VirtualAlloc
ReadFile
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc

Sections

.text
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hc19
Size: 69KB - Virtual size: 89KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE