dd4207653d2c46d4af18284e82611627_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd4207653d2c46d4af18284e82611627_JaffaCakes118
Size

44KB
MD5

dd4207653d2c46d4af18284e82611627
SHA1

df2c014afef016d24417908cfb3d28fd0cb7488a
SHA256

1fbc1a37c927bccc370fc7c89a2c803fa587d3b641db7a658a5d74edd1dcf90b
SHA512

0e80e7bfae5162788c81a3de1c9db0fa1b76bcaa2ba14b0caed9e1c7f15472c83a7b9c8b06c113c35281f565289d0ece6dd719e8e91506ad13a1f6d7957862f9
SSDEEP

768:Y2QPquLLijfIPk0HG/1Am4GUKnSA7mROKgHonCjgVw:fuLCIPBm/hxKPx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd4207653d2c46d4af18284e82611627_JaffaCakes118

Files

dd4207653d2c46d4af18284e82611627_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c7b2be7de129a75599168db6136ae3eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetDiskFreeSpaceExA
ExitProcess

user32

MessageBoxW

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ