ffb9062b7bde98552ef9838df4b4e574_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb9062b7bde98552ef9838df4b4e574_JaffaCakes118
Size

526KB
MD5

ffb9062b7bde98552ef9838df4b4e574
SHA1

38f379750c582d8a4371b37f53bf70bdb448d9e7
SHA256

65fbe3ccaae074b4ec51bf2e2dfc52790e8134741eacd008a7f575614be9786a
SHA512

12e164f8d02428d6f38f1444726a235f03c50b3dbca3cdf1ad7f3cd66d9c3caba3f9389c09a168e292041825038ed8cc3019be3259fec6097b096a446bdaa610
SSDEEP

12288:koy0nOK+1/GqZjwTZumD6XHLleHOrxO/AnnV:kJWp+1/d5w1ulxxO/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb9062b7bde98552ef9838df4b4e574_JaffaCakes118

Files

ffb9062b7bde98552ef9838df4b4e574_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ