ffc39843910a9e89a8439faf2e80ce37_JaffaCakes118 | Triage

Sharing

General

Target

ffc39843910a9e89a8439faf2e80ce37_JaffaCakes118
Size

695KB
MD5

ffc39843910a9e89a8439faf2e80ce37
SHA1

b4f3b7b7717efce0bd6cc0c22100a8f189350d7e
SHA256

845bea63adaa775ce5ce7cca4ef5fcc97223343581dca8d876e1fc891e5510fe
SHA512

a035414ad5dc982ad229ee6f09ff074862069406983e2c8190d7e82588b41d450d3dbdbf57c0323f7de2bf8c2ce9d2c87311f0aee826d575539758a9f81d3151
SSDEEP

12288:1M65+9YxzBqAZRcvyGemX3HVGgF9tMz1wtoQ2lQtun0BtNkYIDRxw7:1OGbqAsvJDnHVG6hqQ20q1YIDjw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffc39843910a9e89a8439faf2e80ce37_JaffaCakes118

Files

ffc39843910a9e89a8439faf2e80ce37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06a0e40e93055fb4656ecfda71124375

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
LocalFree
GetTickCount
GetVersionExA
GetLastError
GetFileSize
Sleep
GlobalAlloc
GetStartupInfoA
GetCommandLineA
lstrcpyA

user32

DialogBoxParamA
EndPaint
ShowWindow
BeginPaint
SetFocus
DispatchMessageA
ScreenToClient
MessageBoxA
GetWindowRect
GetMessageA
GetClientRect
TranslateMessage
CreateWindowExA

msvcrt

__set_app_type
_acmdln
_except_handler3
_controlfp
_exit
wcstoul
_c_exit
exit
wcschr
_XcptFilter
__p__fmode
__p__commode
toupper
memmove
__setusermatherr
rand
__getmainargs
__CxxFrameHandler
_adjust_fdiv
_initterm
wcslen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 673KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ