4a4ecf78c034d6a98b8dd26740d3b6d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a4ecf78c034d6a98b8dd26740d3b6d9_JaffaCakes118
Size

10KB
MD5

4a4ecf78c034d6a98b8dd26740d3b6d9
SHA1

bb6799036225312c0050145f934a5a6180d71f15
SHA256

f5817e2afda23e3ae196a155c9ab0f1c578319f432be04722daa6c35cf4ff21d
SHA512

566fa1058abcc6adf8ff75c7c4ad0a56546053fe17ca3da97983cf9f93916a3999e0ab95334fff3d2682b686cfd7253aa89a18f0e3739168083f125fbc0ac9c4
SSDEEP

96:U4TaARgjdvtIQI1UPFYvhSFuqYqZcCoA+gwZ+tJhGIUWkTZb6ogZQqCB3iA6EU5b:U6bgjLIk2vhSF7NHkZcJWWAZ+rWCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a4ecf78c034d6a98b8dd26740d3b6d9_JaffaCakes118

Files

4a4ecf78c034d6a98b8dd26740d3b6d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19a1a969ec9819b0d6c20529853c3665

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
VirtualAlloc
GetProcAddress
LoadLibraryA

user32

GetDlgItem
GetWindowLongW
GetWindowLongA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ