ff96ccd45efa26c2c5b6f91807704c1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff96ccd45efa26c2c5b6f91807704c1f_JaffaCakes118
Size

435KB
MD5

ff96ccd45efa26c2c5b6f91807704c1f
SHA1

860f911b9efff09833bf2382b900886be182f64c
SHA256

e156f1e9e67102e98f248107170e8cc47a3c0a7ab6ece463941e2fb2ef4db044
SHA512

a088e4d044b8cdb795c60240dba234c69372cb9b21fb9587adaa6233ea18edc4af06bec5af4bb18d8dfe988d6841710f07cda5edfd071b5001a03620a2e0cafa
SSDEEP

6144:yz5UdClOmg4Obs4+MeMHBtQa/h8JPd740t2QoyZmBQ9emcSaj6PSmhiv9tJMSYL5:yAmg4YpnXhCRdM00qoK3Oj6Pdivmnv/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff96ccd45efa26c2c5b6f91807704c1f_JaffaCakes118

Files

ff96ccd45efa26c2c5b6f91807704c1f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79d93aa3af0427e5b6c41bff8974404f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DVhVSMeb
Size: 512B - Virtual size: 371B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yitzvGXY
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ