cff178fc9f9852b74987b680fef4c60e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cff178fc9f9852b74987b680fef4c60e_JaffaCakes118
Size

187KB
MD5

cff178fc9f9852b74987b680fef4c60e
SHA1

bfed3a4ee6b4a5629d8888138e715c84872574bd
SHA256

57066d3a094f7d6cd636551a9c614b50b21d22454cc6272e157493feda2af431
SHA512

cf00b95dbdcb0b9aa2403fd9515557ac15926fe1954ece0cea4aa33f0a480edb9cb1a9ebdaddd6056190513ab9389effdd07f72dc24f6869e0b82c4aecffe84c
SSDEEP

3072:gjOpXx/wGSA2L1RcbCJwpHI74XoyIqcgG00sTNEDMC7hTWVcLmVd/F+t53z:qgp0RevI7EoyRj0sBAscLmVd/FI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cff178fc9f9852b74987b680fef4c60e_JaffaCakes118

Files

cff178fc9f9852b74987b680fef4c60e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dde3b4fbfa40e44246d81538017dcb6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

kernel32

SetProcessPriorityBoost
TlsGetValue
TlsAlloc
InterlockedIncrement
EnumResourceTypesA
TlsSetValue
TlsFree
SetLastError
GetStdHandle
ExitProcess
GetLastError

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ