ffa2e3ea8478cbe88742b4b5db02996f_JaffaCakes118 | Triage

Sharing

General

Target

ffa2e3ea8478cbe88742b4b5db02996f_JaffaCakes118
Size

139KB
MD5

ffa2e3ea8478cbe88742b4b5db02996f
SHA1

5bdebec53d8980056ba096a71b4854d6f7ce7ba7
SHA256

c94b23825e2fefa33f7bf4d65341638aa3324546d8fb776bf06f08fbe0b28939
SHA512

b27fd6943978e1ed89a6b8c796ea37790c37abd9c01d49571b678bdfe77ced4ca0a224834f380341b1b11e355be9b584688be5e8a2bb1a61d12fd4860fe8cca3
SSDEEP

3072:f3jZEN4Po8F535lw57GY0Z8FOwxyTJYzGFjyxA+I6z1EV1N0leSdHk:7+NYTF533w57GY0+DxUJD5yxARUxgSdE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa2e3ea8478cbe88742b4b5db02996f_JaffaCakes118

Files

ffa2e3ea8478cbe88742b4b5db02996f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab984103549c3ec65f5fea1732d40c2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
DisableThreadLibraryCalls
TlsSetValue
GlobalDeleteAtom
TlsFree
GetCommandLineW
EnumResourceNamesW
HeapDestroy
GetStartupInfoA
ExitProcess
TlsGetValue
SetHandleCount
HeapCreate
TlsAlloc
GetCommandLineA

oleacc

LresultFromObject

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ