ffb7502711db98185a4335fed228f4fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb7502711db98185a4335fed228f4fc_JaffaCakes118
Size

10KB
MD5

ffb7502711db98185a4335fed228f4fc
SHA1

a57d2d0e30a31198d680ef47d58028f719898f7a
SHA256

545c84d7410937fd260df8f62eeb6b80b0be4672e8cc273be38d933a35ce2b8d
SHA512

3044c0901e8345faa0957c07e4c6376255b8ca007b31d9b646000f3d4a9deb17a13cdc0ee785508b4ba67e4d38ba3c36895e6cd77930bee46ed90669e2a7630f
SSDEEP

192:GcNurM7UQcbG1SrcIb5ygbx4htSsvgxMGVncx4xNw/HDstLfcb8rz/:GU7UPGJWygbx4hssvUG2g6Lff3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb7502711db98185a4335fed228f4fc_JaffaCakes118

Files

ffb7502711db98185a4335fed228f4fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64b8beba3de92f2015f11fbde07d052a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
VirtualProtect
GetConsoleMode
GetDllDirectoryW
FillConsoleOutputAttribute
EnumSystemLocalesW
BaseDumpAppcompatCache

user32

GetOpenClipboardWindow
SetDlgItemInt
DdeCreateStringHandleW
UnpackDDElParam
DdeAbandonTransaction

gdi32

GdiQueryTable
SetPolyFillMode
PolyTextOutW
GetEnhMetaFileBits
CopyEnhMetaFileW

Sections

.text
Size: 1024B - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE