333c3d365ecd56db2f32f1fd6e50ed18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

333c3d365ecd56db2f32f1fd6e50ed18_JaffaCakes118
Size

9KB
MD5

333c3d365ecd56db2f32f1fd6e50ed18
SHA1

a73efdd3f1ad93e946235463f6cbd0f0c95d3ba6
SHA256

3412dfa8adeef32e04a2a35404f2a5023d4ea8c7feed4ceb1a921c913d3217de
SHA512

1d96b0d0a2c05230d446bbf22a95901178f257a2f87eb306144200eb9b98aef24decf4900d7f58d45d9aad9d958cd7a2245dbd2738eeea82c19b1efa7a5c9592
SSDEEP

96:JCqJcBsq0b+Dq5gLjK8uUns06x8cmCrIGQp+DAf571pu3cLRZIqBSzSCWnedgglf:JCQ+Dqujam8o+DAfZ1pt/pIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
333c3d365ecd56db2f32f1fd6e50ed18_JaffaCakes118

Files

333c3d365ecd56db2f32f1fd6e50ed18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b47720a9a917889ea591c51b8288d86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualAlloc
LoadLibraryA
GetDiskFreeSpaceA

user32

GetDlgItem
GetWindowLongA
GetWindowLongW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ