fff98a927a24a0deb227bea49f7d59a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fff98a927a24a0deb227bea49f7d59a4_JaffaCakes118
Size

5KB
MD5

fff98a927a24a0deb227bea49f7d59a4
SHA1

b0573585029da61019683238617d5825432f47e1
SHA256

a8941b3588746aaaf7994afa46ddb7a0257b76ac15e2605cc7e441b03517bc76
SHA512

c4cefc5f55ed00b847a3527cb2c528303b3082216f40976eab0dd09a409395299dd9bc0dd00ff565632a20bc33c45497855a4104506121ebe033675b3cd44308
SSDEEP

48:ZvtJNOUKeNHV19/IzIZcJ7r/usGL3P87UvRNiHHAH7dhNAMoBAX:Z1CeNHLG8SJ//udL/8YvCn47hcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fff98a927a24a0deb227bea49f7d59a4_JaffaCakes118

Files

fff98a927a24a0deb227bea49f7d59a4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ee78b2c855deae629473ebfbe5610f07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
ReadFile
Sleep
WinExec
WriteFile
lstrcatA
lstrlenA

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE