ff151d29a37401bb80540a43ec92a0f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff151d29a37401bb80540a43ec92a0f5_JaffaCakes118
Size

609KB
MD5

ff151d29a37401bb80540a43ec92a0f5
SHA1

e3c4b7a72c67db8455faed19751193ed30d994b1
SHA256

6d3c88a1623d5b738d27b3c1a51c560bf3e0e76b40dc116e30b5d36c8b6ed419
SHA512

f19b9e471813bef6dbb6086bfb9042c918699483169aec1f5d4945fc3c61cdac706a20aa10bce6a9d4f4fbad49b3f4db14bce6921d02c963ee25b118003facd7
SSDEEP

12288:JF3AuSa+5NEA4yjJLiyQYLYagd4nZ8dLZYvfNIFv3bzDpaKTVF:JFyLm9yjwyg+Z8duqvLzDpacr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff151d29a37401bb80540a43ec92a0f5_JaffaCakes118

Files

ff151d29a37401bb80540a43ec92a0f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 557KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ