ffcc6c28c9c77d34985737c010b3da84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffcc6c28c9c77d34985737c010b3da84_JaffaCakes118
Size

28KB
MD5

ffcc6c28c9c77d34985737c010b3da84
SHA1

f75a966c1b2144b5f9b7eb8555b838fbfb159b69
SHA256

48790d2466b380d5584ce74a61c65aa5d62f8d3cabbf0ef3d8d7d92f98306384
SHA512

16e3c24a294c77cdb0f714f384b47d763c123e7feb05cfbb050f33068e7e23a08fe157e006927977ffc7fb4d1f20ada504ec2c347571294c54729ff207189b5c
SSDEEP

384:LegtXqRlt11bqicUcB70UlUFiqzGrXTdHzcpSv3AXbIylN7AfNiFKyVJ/r0FiRTW:vtXs1VY30iq6rDOpSvWMeQFDO6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffcc6c28c9c77d34985737c010b3da84_JaffaCakes118

Files

ffcc6c28c9c77d34985737c010b3da84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9234fd4883ba713a7215d746db0bdcf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnumResourceLanguagesA
ExitProcess
GetACP
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
RaiseException
RtlUnwind
SetLastError
TlsSetValue
VirtualAlloc
lstrcatA
lstrcpyA

user32

SetCursor
SetFocus
SetMenuInfo
LoadImageA
EqualRect
DrawStateA
DrawIcon
DestroyMenu
CreateDesktopA
ActivateKeyboardLayout
CloseWindow

advapi32

RegOpenKeyExA
RegQueryValueA
RegEnumKeyA

setupapi

SetupFindNextMatchLineA
SetupFreeSourceListA
SetupGetInfFileListA

Exports

Exports

Mhdxdegvx
Qkat
Uidemj

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ