ff7dff8d60f0dc6cf1f63466697a3e7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff7dff8d60f0dc6cf1f63466697a3e7b_JaffaCakes118
Size

360KB
MD5

ff7dff8d60f0dc6cf1f63466697a3e7b
SHA1

eb51c429637ae4f84e8d1bceaf6232df26723290
SHA256

5d43914d9f50469a37c19e5a4b0cbdb06bb13be4ebc5165c85af4edd2f9ebc3e
SHA512

05edbead84c2201ac8b9c808591e72102e51909cac406e27a82ab104e634d4e9571d1c0c593a9403bd346c1d5fb8047d9fc551e2409989eea4bfbf3700480f3f
SSDEEP

6144:Zq2wZV/Z0seqzXZM2nlwpuqnUBtx2BOzDyAD0Lyyai1m14V7c6SvJwWxi:sdvreiJzo6x2cXdWyQVPSOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff7dff8d60f0dc6cf1f63466697a3e7b_JaffaCakes118

Files

ff7dff8d60f0dc6cf1f63466697a3e7b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f7d7b520f7b8b4ee26aa65cd025aa23e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
VirtualAlloc
VirtualFree
EnumSystemLanguageGroupsA
GetModuleHandleA
GetProcAddress
ExitProcess

user32

DialogBoxParamA
GetDlgItemTextA

gdi32

AbortDoc
CheckColorsInGamut
GetObjectA

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 178KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE