ff2973d14c90a7262453b08020e99f2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff2973d14c90a7262453b08020e99f2d_JaffaCakes118
Size

188KB
MD5

ff2973d14c90a7262453b08020e99f2d
SHA1

031ab34d567660a146f10cc0f3aebe3adb292f39
SHA256

444d445989eaf9fe9d4e35b0c096c6c38eb040307a9059dec2a57de80f4ae7a6
SHA512

246624748cfd817796f16d1ee3099ff355283b55455dae3d5bf726a9300cf0fd0d16995feca910f68983b8bf76bf511518e1595d3b713b7ed58a847e892e5435
SSDEEP

1536:l/KVvhq8aP//mEGE7NqeT0GQpTLSsE9mQZjFE4ahXohF5kYlmM4Q7/hsULFfZuv:xHx/mRE0e0Ga/E9DFt2ohFrlN/2+BI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff2973d14c90a7262453b08020e99f2d_JaffaCakes118

Files

ff2973d14c90a7262453b08020e99f2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61dee12612c1f53deb25568caea806b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSysColorBrush
CharUpperA
SetWindowTextA
GetFocus
ShowWindow
SetWindowsHookExA
ShowScrollBar
GetMenu

kernel32

LoadLibraryA
GetLastError
GetStringTypeW
ExitProcess
GetThreadLocale
GetVersion
VirtualAlloc
GetSystemDefaultLangID

Exports

Exports

_IPc@24

Sections

CODE
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sjdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fgdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ