ffc117d6e5c82c717b9434aa9005f151_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffc117d6e5c82c717b9434aa9005f151_JaffaCakes118
Size

36KB
MD5

ffc117d6e5c82c717b9434aa9005f151
SHA1

9cbb52a3fd362a1e661beb228fb15e42448bf962
SHA256

6e5a2f2a27e6fd7e3f14ed8158830a924565a30164671c113f2d0b8bb554ed41
SHA512

f7b63a937b10bad71f49b42ba3c9536738cc6b28976c82778f0115afece791fbbaf11e5ca7790cc1c8dda213238ffcde631943054a80ba19019bacc960ec9e73
SSDEEP

768:sxkfPfOmmQaY4BYAWy4N9m5vFR2Y2p4zu:sxkcpDr9FgY2pb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffc117d6e5c82c717b9434aa9005f151_JaffaCakes118

Files

ffc117d6e5c82c717b9434aa9005f151_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a79c5d6f0b0b919ece6a4db2230eda4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
GetProcessHeap
HeapAlloc
HeapFree

user32

MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE