ffcd347952b9c8692e2a2321d85405e6_JaffaCakes118 | Triage

Sharing

General

Target

ffcd347952b9c8692e2a2321d85405e6_JaffaCakes118
Size

69KB
MD5

ffcd347952b9c8692e2a2321d85405e6
SHA1

a7a346d3d3466d4faa5fa2f444136abb55e947ec
SHA256

c8d0988a730bc9b1ca5f60d8258ef9dd2299f3abbc3189f4e75b2934cf56940c
SHA512

24a719af5f3549ea3e389807d4f0fb7e3c3ed50e23ae4c3c3e86d5dd1aab5a8ae40b12fbdc431f7fa30799d39c1f940c700e704feb6b28013862c42be642a258
SSDEEP

1536:OyO2c0HF646REHL6PSY+A37feaCMJDmYsLIb4PvYqHB/AdGh:OyVc0HIRQ6PSDADeak7dJHB/AdGh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffcd347952b9c8692e2a2321d85405e6_JaffaCakes118

Files

ffcd347952b9c8692e2a2321d85405e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

172a6440b3152d86a4392d15946c54ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

winver.pdb

Imports

kernel32

GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadStringW

shell32

ShellAboutW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE