ffe32c9532093a6b4b789dbdd7383553_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffe32c9532093a6b4b789dbdd7383553_JaffaCakes118
Size

24KB
MD5

ffe32c9532093a6b4b789dbdd7383553
SHA1

1282e8edfd1424edf8a76b3a929a4722359df40c
SHA256

05bcfe9f62f7204721c6162f735b5aacf984471b05913eb31e0a4a31c71a10ea
SHA512

872cb4f8ce8b397193c84d884b26a1a5dfb1279dc68a1c61b3fee50f823915cfff6f9fbce5ba13a3638610af6247aad7d99fd6a967f98c354be5bd926fb9a383
SSDEEP

192:s2SL0UiPjRDoShweJANLWrQXi5B1hUmZBdZDRTuwhgozdirGM94a9pOyyWfG7nhF:4WNlhJUml3txtnyyWerh6oZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffe32c9532093a6b4b789dbdd7383553_JaffaCakes118

Files

ffe32c9532093a6b4b789dbdd7383553_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88468a2aad02cc7597aabe5e483f5202

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

HeapCreate
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE