64cda4829b5f135ad648913fe780c625_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64cda4829b5f135ad648913fe780c625_JaffaCakes118
Size

13KB
MD5

64cda4829b5f135ad648913fe780c625
SHA1

611b13713ad39fe3ee56a3bf9fccb36a74cb1c29
SHA256

e0ee425848f9dbd3de67bf5f797f1a53c0f7d782ad4f015078b4ac7e7e86f3d2
SHA512

7b9bc8f3b204074abddfa338de4274327e90f9b99f49247c7d8b99bd005994f14dd9c179d42a973a2997c72555d2511343e6bf7bdb008c165dc9d743d0b2942b
SSDEEP

192:ZsaGbF3jtPSN/F4IomQgjIoUbERIMZV3bp6O+r4P+r4w:GJF3jtPSNNrBGaV3N6xrfrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64cda4829b5f135ad648913fe780c625_JaffaCakes118

Files

64cda4829b5f135ad648913fe780c625_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef2505f1662baa875e6b7d1b9426fd5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DialogBoxParamA

kernel32

GetModuleHandleW
GlobalFree
GlobalAlloc
ExitProcess
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE