ffa5a9f16ca81122f261390d0c9a3b53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffa5a9f16ca81122f261390d0c9a3b53_JaffaCakes118
Size

347KB
MD5

ffa5a9f16ca81122f261390d0c9a3b53
SHA1

f09f50f1720b6a2accc47ee0fa7e45fb99df7630
SHA256

4c7fe010ce342190b203f7f8b72ca3f51c83eca015447376d5ddb89d3c4c3c4d
SHA512

6177b87d6cb6bb779c6998dfe56443dbd5c6b85c377072aa1c1eecb9838394d80a8970aa64c7a2e60bfea574a7bc117ce3ed64796139402baf3cc0e3974b12f9
SSDEEP

6144:muLayxI7hCoFPAiNMdixNQ8CLwBN9/46oSnmlBNicMpIFV2:VaQuhTFPfbzFCMBr/4bSnm3oIF4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa5a9f16ca81122f261390d0c9a3b53_JaffaCakes118

Files

ffa5a9f16ca81122f261390d0c9a3b53_JaffaCakes118
.dll windows:4 windows x86 arch:x86

eb8ce8d6456329b7038389384482d394

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

mfc42

ord825

msvcrt

tolower

kernel32

FindNextFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetDesktopWindow

advapi32

RegEnumValueA

ws2_32

bind

shlwapi

PathIsDirectoryA

ole32

CoCreateInstance

oleaut32

SysAllocString

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

netapi32

Netbios

Exports

Exports

Dispatch
InputFile
PrintFile

Sections

.text
Size: 322KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE