ff7f4a90c30ed422e940062c559a4895_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff7f4a90c30ed422e940062c559a4895_JaffaCakes118
Size

120KB
MD5

ff7f4a90c30ed422e940062c559a4895
SHA1

7ea837ac5418e63fcf353043c05e9ef94674f1ff
SHA256

7b528c099b2545f1f22df75566de5977400fcb003287f1465275a8aedfc99c68
SHA512

c903bd1f845ee02c9a93aa804023d6336eab4ec5038f1bce8826c1822e8dc53c11774c2118b0a3a14da7fc8ffb24b5ac7938fd7dae58b93a80b48d5514ed82c6
SSDEEP

1536:TtwB1P+B8XkMmOHQz7YFY3N2GCXCK8xkHsdmVeBRnqgKlN5xBELL6dObACuLk+dx:B47XkMmVyYwcTqgKlNaLL6d1Cuog//x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff7f4a90c30ed422e940062c559a4895_JaffaCakes118

Files

ff7f4a90c30ed422e940062c559a4895_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1cccfa3e0f9402a5cef3143ec689fb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
strncpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE