ff35bbcfa2897938ec30c81b3c782181_JaffaCakes118 | Triage

Sharing

General

Target

ff35bbcfa2897938ec30c81b3c782181_JaffaCakes118
Size

101KB
MD5

ff35bbcfa2897938ec30c81b3c782181
SHA1

b488d5755d765faed679cd120803f6e7a66ae1a2
SHA256

127f4739681acc6b0342540c4f574d3a953c7652b851fc07d397652a36cc9073
SHA512

c2310e38e78c4f0681e2170d59389664175e6015c0c97e36e781fc4ce2170b443036b75973f491cc87b29d4d548d536986ad89193ec46f5c49640877c47f2071
SSDEEP

3072:AgO1mT8FdHX6Po6vDtQQdD6UAd0d9+pxamRu:N2mQHeoatx6UO0d9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff35bbcfa2897938ec30c81b3c782181_JaffaCakes118

Files

ff35bbcfa2897938ec30c81b3c782181_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 196KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ