ffea3087f268c42b9d1b30c0910f00e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffea3087f268c42b9d1b30c0910f00e8_JaffaCakes118
Size

41KB
MD5

ffea3087f268c42b9d1b30c0910f00e8
SHA1

74e3bdd5976c175f74314d46c3bb85d20cac1c49
SHA256

38f30862a31aa43a638348b146ba37cbbf1647504c35fd51a402e087fb0fc7d6
SHA512

af838b81c18745d1333f0ef90ed5aa550110d2a78b495de9845c24432e2532311e787c5771bc306451df4af259fcd978170e7757889781099a33ff03d87040a4
SSDEEP

768:b46NG38BXde+fOnkHB3aq1aN+bqZC4PHiki:7I3kde+fr3Z8N+GZCS9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffea3087f268c42b9d1b30c0910f00e8_JaffaCakes118

Files

ffea3087f268c42b9d1b30c0910f00e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78b1579f165f68f664fd137082a91c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strstr
strcpy
_umask
??2@YAPAXI@Z
_spawnl
_stat64

kernel32

GetNextVDMCommand
GetSystemInfo
GetVersion
GlobalAlloc
GetDriveTypeA
GetStdHandle

Sections

.text
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE