ff672abec343b5f4d282f29926b7e1e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff672abec343b5f4d282f29926b7e1e6_JaffaCakes118
Size

624KB
MD5

ff672abec343b5f4d282f29926b7e1e6
SHA1

818e28144383dd8817f9d5e2b7e59f27d8b0d623
SHA256

543765364c7e6bf534952bc255f56d7876599d853a5494ce9d70be2a76ecd1cc
SHA512

979b37805a7dfe7684946b81e553a918ec05ea35cf398781310a47a6a51c72dda146c58f2fdcc03bdc226b78d960db09e68305fcf3d066738456991129d7c41e
SSDEEP

12288:sRsIziifWfk+69bxPhuSZ7cgMar5q7yimgw3HUWYX:i11fWfOhRMWk7yimgwkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff672abec343b5f4d282f29926b7e1e6_JaffaCakes118

Files

ff672abec343b5f4d282f29926b7e1e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79690c0d6af3e8eecb3c2c5e3f71ec1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32 user32

ExitProcess

user32

MessageBoxA

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 575KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ