d22e24173790b87f689cffb250d36a6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d22e24173790b87f689cffb250d36a6e_JaffaCakes118
Size

60KB
MD5

d22e24173790b87f689cffb250d36a6e
SHA1

c515e8738d9521a859ff7860fd90939e960a048f
SHA256

eb7cd7e78c141955dc9aa282d8a93813a67e86d8b753f10b3d4a9ae4314acca9
SHA512

a57aef7aeea61f8454bd423bea3abf0dd6195c77388db2f11ae12949d73e7dcc33e648dc3588f2e9bbeee1c06f1d15ab5c4a3d1a4f2e7d84de4e69efb2a5347b
SSDEEP

1536:5bcEl/6HzK7ZEfST57Z4dRYNObFr/NHpVbtCN:5V/mcEf45OdRYi/NHTZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d22e24173790b87f689cffb250d36a6e_JaffaCakes118

Files

d22e24173790b87f689cffb250d36a6e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

51609774e630df3589e4ba63b40f8ca8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExA
WritePrivateProfileStructW

user32

CharToOemA
UnregisterClassA
CreateWindowStationA

gdi32

GetCharABCWidthsA

Sections

.��
Size: 53KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ