ffa5c3346d963d6719c23275088d21c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffa5c3346d963d6719c23275088d21c4_JaffaCakes118
Size

5KB
MD5

ffa5c3346d963d6719c23275088d21c4
SHA1

08b9b718bc53982028fc86859c3df4d14ec057f7
SHA256

dc9f8a69414e3a59259616f8e18fbcc68d61389038eaabcf28c30be307cf6ad1
SHA512

5eb4e598050fe2b91c4fa639c8c1f31d6be5e34077365f59673fc2e035a9ef2caf2ae4b143c6c9180d48a7073cf506576f614777d693f71730138cad21c9a52b
SSDEEP

24:etGSH90AGqvqwRaxxKuBXOev4G4JGs/K8lQIBTgxNUM7bIA+4Rn3LoZW0NNWZCPL:6HyrqvxgLRO/nKNIBwhboZWqmOx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa5c3346d963d6719c23275088d21c4_JaffaCakes118

Files

ffa5c3346d963d6719c23275088d21c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1706d2a56f4c1061417ec650039950c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CloseHandle
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
GetModuleHandleA
FindResourceA
ExitProcess
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE