bff1c4766a5b63727d8f3a0be97a6f6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff1c4766a5b63727d8f3a0be97a6f6f_JaffaCakes118
Size

220KB
MD5

bff1c4766a5b63727d8f3a0be97a6f6f
SHA1

17126b2bb1065639a24853f869a6c7a7381846cc
SHA256

758a1047713dffb93d1c48fb8ff07ff08de6155ca7202a8fa6b438771258b0cc
SHA512

3279c8cb6a148a7c0356ace7489576eb0d9e2ae79783d34be42eb418924d93fc50d8522988da5c4eeec93a339bb54deb6c0aeb859bcb3eb110a36c96dab5af3d
SSDEEP

3072:xCKomy45Zgo32f00BdbFNXVijLnEv12EOKBVGN+5n0lWFFePinn/gbl68VJ2k3:G4rF2F+Qd28j7HFsPQYlPR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff1c4766a5b63727d8f3a0be97a6f6f_JaffaCakes118

Files

bff1c4766a5b63727d8f3a0be97a6f6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.scpack
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TEXT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rs2c
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newiid
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE