ff331543c177fda022cd634373fd5fb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff331543c177fda022cd634373fd5fb4_JaffaCakes118
Size

81KB
MD5

ff331543c177fda022cd634373fd5fb4
SHA1

c07bde1c9f89190f2672200e6f5420f3bc22f345
SHA256

168fb8623f62331944f60e0ee12dbc170b7c852c6d2e89693ccc99e8b4de61aa
SHA512

a218a50bc6322840b437ade353e07f51aba587cdc50016d58de1f49f20088d7a08d0408ad0b66e2c89a3feee29ce7cc0bad4353a942538720f028468b6c6dc79
SSDEEP

1536:FgAigf8bS6sgdWK7pWO9X2V7AQWjr89T:FgAigj6GK7p9QE389T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff331543c177fda022cd634373fd5fb4_JaffaCakes118

Files

ff331543c177fda022cd634373fd5fb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

293a087e69e907612738d4995bb51c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 153KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE