ff7e605cb3b2073cc54979f92cc46f2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff7e605cb3b2073cc54979f92cc46f2a_JaffaCakes118
Size

60KB
MD5

ff7e605cb3b2073cc54979f92cc46f2a
SHA1

510d22bbe66f9e32b9f643e20b720c54541507a7
SHA256

9e98cbb249d03ecaf382620fddda47f9c1f152ece029df84b34d52b620c888c4
SHA512

ceb43327ebcad649f135ff46de7cd9a3a68da572848046122537c3a437e39bcd1b17a3347ec9a3f169020d3f4100cb3d275f0487236d5d8a0921137450c1e5d2
SSDEEP

768:XuWP58MraKDj4nV9Yk8kFsUPFUOCpw8QNwHHdI39oEE1qb7ZQ1Quwc:XuWP9rjn8wkJ7PIpfrHd/EUqCkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff7e605cb3b2073cc54979f92cc46f2a_JaffaCakes118

Files

ff7e605cb3b2073cc54979f92cc46f2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

893fc1428e3dc065b6bb7562a0cbcea1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateThread
OpenFileMappingA

user32

GetFocus
DialogBoxParamA

comctl32

ImageList_Destroy
ImageList_DragEnter

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ