ffba276f6564e92caac2cb89c147b582_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffba276f6564e92caac2cb89c147b582_JaffaCakes118
Size

14KB
MD5

ffba276f6564e92caac2cb89c147b582
SHA1

47211cabc3de7db2495c3709ff821f3aa59a7e1d
SHA256

12c37fffa95b3f4d4c6d8be5bf5abc5a64f1935aee2cad60bf5f03113ddac455
SHA512

3f7104a91547299faf38bdac656304a68076da1ef8b2a82e20c78c9fc27eabad89299db8b6ba84f70255b4b8f094e5b0c962a02b281af9881b6ef3082aa5aee1
SSDEEP

96:Y5kmVUtynt0NroaJulhWMc9SBp+ivokEJHLQae:Y5kKUtyt0SaJu71c9SrqVLQN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffba276f6564e92caac2cb89c147b582_JaffaCakes118

Files

ffba276f6564e92caac2cb89c147b582_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5f5c7a4cfead8f79d0320b270c3f09d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapReAlloc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 701B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ