a1d9aa395f577b3a3058b5051b911c18_JaffaCakes118 | Triage

Sharing

General

Target

a1d9aa395f577b3a3058b5051b911c18_JaffaCakes118
Size

43KB
MD5

a1d9aa395f577b3a3058b5051b911c18
SHA1

a714ff1abc38177af94adfd9e4f0725a3db976a9
SHA256

cb8e31dfe5e4da53c4c0410b39ec6d8eac3f4bb5540c23c4304dd713ad328762
SHA512

bdbf0fd47a8cd22d39edb6196ca3e2dd57bdd95f18eb16e6c1a1534e9bf6f7609ac1a20d9effe7fcaf9f7bfc794a63226cf83e524134229997059dcda4687e09
SSDEEP

768:Zy8QIiNtM/tWkr3ducclGh+sR8I0CsekdyfWkfP:ZXES3gleRp0CsNdyukfP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d9aa395f577b3a3058b5051b911c18_JaffaCakes118

Files

a1d9aa395f577b3a3058b5051b911c18_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c7a685cf4d10d61d02d30125a75dea44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress
ExitProcess
GetDiskFreeSpaceA

user32

GetDlgItem
GetWindowLongW
DestroyWindow
GetWindowLongA

msvcrt

_adjust_fdiv

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ