ff0506226b0f79d953240bb936730522_JaffaCakes118 | Triage

Sharing

General

Target

ff0506226b0f79d953240bb936730522_JaffaCakes118
Size

116KB
MD5

ff0506226b0f79d953240bb936730522
SHA1

e473ba1a36298235168dc35c520bcab88327e673
SHA256

eb8c5d755cab99b2504653b83104e50257252791cab03951095a4bf83986bd16
SHA512

d1304c50b0bc3b789ba91441c1fc262b4c5709956e035191b81f19915785a33f8515c5e491a10bd592e17bafc3640bc1bcdc35b527a51220967b43532f17b3c1
SSDEEP

1536:VpGoaFJjXprydeLIUxJcP04ne7rTG215Pgdxqi2Sk0T6Y2UeC:nGvp2sJz4ne7r6215PgP5uY2UeC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0506226b0f79d953240bb936730522_JaffaCakes118

Files

ff0506226b0f79d953240bb936730522_JaffaCakes118
.exe windows:4 windows x86 arch:x86

062aa184c43fc1c38838d2d1b270a568

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetModuleHandleA
GetCommandLineA
VirtualAlloc
ExitProcess

user32

GetWindowRect
LoadCursorA
GetSystemMetrics
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
GetClientRect
GetDC
ReleaseDC
GetSysColor
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadIconA

gdi32

DeleteObject
LineTo
MoveToEx
SelectObject
CreatePen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE