ff5855f0674f2f53abcc6270dd741ef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff5855f0674f2f53abcc6270dd741ef9_JaffaCakes118
Size

200KB
MD5

ff5855f0674f2f53abcc6270dd741ef9
SHA1

5285c032847d124c765e7d91c3ec62edbfde9ec8
SHA256

e044b5e5bcb0500446dab85a3ec86f55b92a8c2aabc894e05f254721d32927e4
SHA512

d925078517c551c6ca91af8a26ed8fa8099ae89102c5821575f540d151ba4564eb91adf57b2cebc2973f3a541f406290ad0a21f1c2aabd2cb58e75b070657ba0
SSDEEP

3072:m6IoGIEtec5xTaoYt9E8uS6Pj9u0QJVKiSBv9MxqQvJqG3E7phKQAj6P:m6pGIEtecf+x9E8yLKJSBWFL3EOQAj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff5855f0674f2f53abcc6270dd741ef9_JaffaCakes118

Files

ff5855f0674f2f53abcc6270dd741ef9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

586f10d61b430e2535f58c74666d5dcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentDirectoryA
CreateEventA
ExitProcess
ReadFile
GetModuleHandleA
LocalFree
SuspendThread
LocalAlloc
DeleteFileA
GetCurrentThreadId
GetVersionExA
ReleaseMutex

advapi32

GetUserNameA

user32

CreateDialogParamA
GetActiveWindow
GetWindow
RegisterClassA
PostMessageA

Exports

Exports

a
s

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ