3573ff63a2f1205e00674f862cae6925_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3573ff63a2f1205e00674f862cae6925_JaffaCakes118
Size

10KB
MD5

3573ff63a2f1205e00674f862cae6925
SHA1

e42f7b3f9f4152df29208bc846381cd3f0bc0fbc
SHA256

cb0f220774ee8b25c235ed9115a83c368be35b0b2ec81a45487b9aa5ad3d5414
SHA512

b2c166e445219df8c194c898b6e702928cd176e2c60ea667499f7e90c928137a24291dd80335777fe8b5d64633874ad9679a31650e0b1b854cc5c77388a791ff
SSDEEP

192:3rEBNoewQnx5g94FYVqxZIvdXNGOzNIMCNAv:3rEBNoewQx5y4O9GOZxv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3573ff63a2f1205e00674f862cae6925_JaffaCakes118

Files

3573ff63a2f1205e00674f862cae6925_JaffaCakes118
.exe windows:4 windows x86 arch:x86

517862a9741657eb134aa21fc5b133eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress
GetDiskFreeSpaceA

user32

GetDlgItem
GetWindowLongW
GetWindowLongA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ