ffaae12fb816443c1088a564c57044d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffaae12fb816443c1088a564c57044d4_JaffaCakes118
Size

8KB
MD5

ffaae12fb816443c1088a564c57044d4
SHA1

cded977bf99661e9431585cd248b231e9118de4a
SHA256

a29dcf7c280435e1aadc4c913b72715d61fa50fe0ff53de9dc3cd03a25817335
SHA512

0d8785fb895d4769a32d48fc8fd7979ddbbd22c8149507ac2d062d94499da6b426f2ddb0c1a176b9599edf9fa9784b1a22b31e73682f2c9efef07f2d7faec74a
SSDEEP

96:XqNRalEPwJg+ADM3h85hVmVYoEzeMzCnt+F098tg1BVM+z5Y2rpMGGihl:aNR1Pw7h85hVmViegxGHL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffaae12fb816443c1088a564c57044d4_JaffaCakes118

Files

ffaae12fb816443c1088a564c57044d4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a31a9b57cedb06577c88fa172d6731c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SendMessageA
FindWindowA

kernel32

GetSystemDirectoryA
lstrcpyA
lstrcatA
DeleteFileA
WinExec

Exports

Exports

AutoProc

Sections

.text
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 343B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ