ffb63165267e8f3cf0cb0eb9e0535308_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb63165267e8f3cf0cb0eb9e0535308_JaffaCakes118
Size

12KB
MD5

ffb63165267e8f3cf0cb0eb9e0535308
SHA1

711565bdfc04cb9f8eba563bf1401156b2b6a363
SHA256

b633fe7d3453f33a48328c4ddf8a020903e51395cfb3fdb0e84c4504426bc405
SHA512

9e448db84e43fae41d802e7c51785d21ac2a62cf571bb38cb7ac789f6785bbe89a29ae96b7f84993c12361905a3565eb5f369c49b2c9aaa1a56ae134e3ee1e10
SSDEEP

192:MGBvyF/MNBhpYhRtYCHfPx/2JyC3fTv60HJ/A+zMYp/W781gWO:MGBVA/ugPx/2JjO0p/A+zMYp/W781gW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb63165267e8f3cf0cb0eb9e0535308_JaffaCakes118

Files

ffb63165267e8f3cf0cb0eb9e0535308_JaffaCakes118
.exe windows:5 windows x86 arch:x86

84dd4ed89bbac268b30b4adcaaf39b37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

exit

advapi32

RegCloseKey

user32

SetTimer

msctf

TF_InitSystem

msutb

GetPopupTipbar

Sections

.MPRESS1
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE