dd13446dcb750d681510410072f0edce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd13446dcb750d681510410072f0edce_JaffaCakes118
Size

1017KB
MD5

dd13446dcb750d681510410072f0edce
SHA1

98ece04f8b09fdac5f378a5cb9bfa7d3af4b1b27
SHA256

746ba35694c9dbcab03c3f54bf10f9fb082866bab644672f4f5c1db37b3e6fb5
SHA512

8aa320243eb6d47d4c83eb5bc24e3edf07e5bbc3af2fc79ce965d0e2d2f65356f7c76f359dab1ad4974547d747242b637d35d1e6e41ea149a34e9ffa57973b8f
SSDEEP

24576:UevJlzov1sbBADWoZeuS70MFhiQ37RkJWj28jH2if7se:PJBovCbyDfS7RtdkJW3iuv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd13446dcb750d681510410072f0edce_JaffaCakes118

Files

dd13446dcb750d681510410072f0edce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

618a3af22eb82af522680c8dd8549a5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
VirtualProtect
ExitThread
GetSystemTimes
OpenFileMappingA
LZDone

user32

SendNotifyMessageW
GetMessageA
SendNotifyMessageA
EnumPropsExA
OpenDesktopA

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 338KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE