ff8a1f6939b480e83779a6515e574b1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff8a1f6939b480e83779a6515e574b1f_JaffaCakes118
Size

195KB
MD5

ff8a1f6939b480e83779a6515e574b1f
SHA1

f525daa97f28fa133eb3bf77a1a71ce28c26a476
SHA256

1ee5cddde9072d74c32dfdc4a42e7630a9a61b279d780c3a3d263f53bd5bce5f
SHA512

ed0218eb81046548d5878e22844adefb83de1125a462299f8f0e4498a8cc1e33b0b6815b6b690b28fe5691abd310baf1fe7659f41d7ed3971805a1aa70b587bb
SSDEEP

6144:9x7qoxJ8xr6LLar5+ji1bg62YYWWqyv9iRzwMN8J2:9x7PzqsLaSi1XYWmvS4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff8a1f6939b480e83779a6515e574b1f_JaffaCakes118

Files

ff8a1f6939b480e83779a6515e574b1f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

cfe8980c28ec391310a8301975164be6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_callnewh
_except_handler3
_mbslen
__getmainargs
exit
__p__commode
__setusermatherr
_initterm
__p__fmode
_wutime
_XcptFilter
_fstat64
_heapused
_mbscat
_ismbchira
__set_app_type
getwchar
_acmdln
_controlfp
memcpy
_open
_exit
_adjust_fdiv
mktime

gdi32

SetBkMode

kernel32

GetModuleHandleA
GetDriveTypeA
GetCPInfo
VirtualAlloc
lstrcmpiA
InitializeCriticalSection
IsBadStringPtrA
VirtualFree
HeapAlloc
RaiseException
GetStartupInfoA
GetDateFormatA

user32

DeleteMenu
CheckDlgButton
LoadCursorW
TrackPopupMenu
CreateWindowExA
WindowFromPoint
GetDoubleClickTime
GetScrollInfo
InflateRect
DispatchMessageA

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ