JaffaCakes118_ff3691e10900b5ef1fa28084fa0f9fde | Triage

Sharing

General

Target

JaffaCakes118_ff3691e10900b5ef1fa28084fa0f9fde
Size

482KB
MD5

ff3691e10900b5ef1fa28084fa0f9fde
SHA1

28beb463a74be799f393b02d46d9eeffabbf01be
SHA256

ea20698345ad7ce39ce4138f5b348ebdbd4a1fac32fa5747d9506b949bdbc4ca
SHA512

b2b974943be8c5df953395cee179a991d544b76c02695e46882a0a8683a7ab5a9b3fe986322d1316bf266b12a22ad8e1d6ddb480079943edb67cdfd280efbc10
SSDEEP

12288:zudktn3Y6LoFTzXQXmLZMQTgRf57w7dZRDAF8ajHoI:iaLoJrRLZGRtidLS8ajHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_ff3691e10900b5ef1fa28084fa0f9fde

Files

JaffaCakes118_ff3691e10900b5ef1fa28084fa0f9fde
.exe windows:1 windows x86 arch:x86

f0267c12108a175e563cb54160a6c8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
GetWindowsDirectoryA
WriteFile
CloseHandle
Sleep
LocalFree
ExitProcess

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ