ffcbc0b2cd94d126fc57a59a3b82b21a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffcbc0b2cd94d126fc57a59a3b82b21a_JaffaCakes118
Size

269KB
MD5

ffcbc0b2cd94d126fc57a59a3b82b21a
SHA1

7c83ad3afc68ecc03d2be866a9485aeaf2f291eb
SHA256

932d3bdcfdcfd7c7070dfa423067c6d09595210e7413f2e254e39e5a2c263750
SHA512

9ee2bfab0f2e0ff7f167894386ecdbab1625251ac4f6097ade9e88a23cc4c2d6bafb9132799b1af7f40f54c97a5ef439a59257a16e86130f97bfe6b9a90cdabf
SSDEEP

3072:cn1+pJRS0nK3V2g71v7TULvF747UVQf2WHjy+vvyaw/ij16yrL/1UmtTBfOqprPR:c1AnKlXA3S9vvy7/ip6yr+mtTBLprPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffcbc0b2cd94d126fc57a59a3b82b21a_JaffaCakes118

Files

ffcbc0b2cd94d126fc57a59a3b82b21a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

146b5f77419fda6b8669d2dfa5d2b81e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

gdi32

CreateCompatibleBitmap
StretchDIBits
ExtSelectClipRgn
GetTextFaceA
CreateDIBitmap
DeleteEnhMetaFile
CopyMetaFileA
CreateSolidBrush
RealizePalette

msvcrt

__CxxFrameHandler
_ftol
_CxxThrowException
_purecall
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
??3@YAXPAX@Z

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ