ff3f32059353ac06efb2f2292ea041e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff3f32059353ac06efb2f2292ea041e3_JaffaCakes118
Size

40KB
MD5

ff3f32059353ac06efb2f2292ea041e3
SHA1

4fa4e42367924a7ffe5e48c7d9eaa8b18cd12c0c
SHA256

6dfd29152cc0f572679a63a182b9c300184ff872d4b17163df83939b868db4a3
SHA512

9220a5a1112bc6eb8bd40c97e19942a3e927e0d0b5663eb38398c4ecec04ffb08cabd55a78b71c50d39446940903b1f05db9f099b90f65d82b2887c7ad3546a8
SSDEEP

768:o6VGfhdbEtVI3L8C5xzk9d6NiXxybUqc3os+2YxO/uisHjGXicCeDu:xVGfhdbEtVI782zk9IDUqKYxO/dCgDu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff3f32059353ac06efb2f2292ea041e3_JaffaCakes118

Files

ff3f32059353ac06efb2f2292ea041e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE