0a9a2e4fd4d8145118eb0d23943d68bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a9a2e4fd4d8145118eb0d23943d68bd_JaffaCakes118
Size

279KB
MD5

0a9a2e4fd4d8145118eb0d23943d68bd
SHA1

f9cbc958ee58414b887fa875686866d8eb44029d
SHA256

d5d7275d0cf7ebd276112fe91d9e63a83be082055389cc94824e033b7fefc550
SHA512

8ec6c2ccfb93529fd506f40236ea4cd413551ed97548bd275eef2999af1ea6e40387f730ead940add3c08d83405772c6844f663be24e5f228b6575cb276ae217
SSDEEP

6144:QojOW7+Er/L3Jw953dqZZoQm5we3Bm8ZU59R816bz+ilIza:Qojb7+0z3Ji53A1m5we3Bm84a6bailL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a9a2e4fd4d8145118eb0d23943d68bd_JaffaCakes118

Files

0a9a2e4fd4d8145118eb0d23943d68bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf98949d33fe6b3b01bcef155cd16dd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongA
GetDlgItem
GetWindowRect
GetWindowLongW

kernel32

ExitProcess
CloseHandle
LoadLibraryA
GetDiskFreeSpaceA
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ