bff04da657c88fd8f48aef93c64f11b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff04da657c88fd8f48aef93c64f11b7_JaffaCakes118
Size

90KB
MD5

bff04da657c88fd8f48aef93c64f11b7
SHA1

52cc7d399c8e0f20b6b70df4b26cf37046bed7d9
SHA256

509e4d0800dc6402480b18fac9e83553ce0ffc9e77431369f29c362e0f07345d
SHA512

0e17a387ecf727f1621ebcc3832c933811b4f435b53195c138a6f990c3776d6578408d786e2dc4187499a925efac1a17653cb4a2b4dddc0b01755df827b7af3b
SSDEEP

1536:toVV7VIGfUKi0UXG/jJrcfeiK9VW1kpRgtJV2HaaZvLaz+ZvuCXj22:67tUKiW9c2bgsgtJVHgvLaz+LXjr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff04da657c88fd8f48aef93c64f11b7_JaffaCakes118

Files

bff04da657c88fd8f48aef93c64f11b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

712867192a95fe9462fc4984fdf25b80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

FindExeDlgProc
SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve

kernel32

ExitProcess
CreateThread
FatalExit
CreateThread
FatalExit

user32

GetClassWord
DestroyCursor
GetMenuState
CharToOemW
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE