fd884eab168b0a3cb61883e5620e532c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd884eab168b0a3cb61883e5620e532c_JaffaCakes118
Size

10KB
MD5

fd884eab168b0a3cb61883e5620e532c
SHA1

ead3d7b21e7184b13ed4341fbebed9388f81c1a6
SHA256

5527066194349adf1654f3838b7b1fc8a7c7c058560d22fa0365d88d6ee75801
SHA512

00a90fb2d91d11b0f07218eee64475a6afd82c991ad810881a6b09de79ec894c05116d45b8638e7257e358789e2a180b441b9f2d40c681b9471e1326c3b23b8a
SSDEEP

192:yIYFHNRKAbULcAoUu4DCeS9iTlrzP+ng:XYxPtbUQAooCeS94pzPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd884eab168b0a3cb61883e5620e532c_JaffaCakes118

Files

fd884eab168b0a3cb61883e5620e532c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f47650f588c9b24ad430a34438cefac9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
GetDiskFreeSpaceA
GetProcAddress

user32

GetDlgItem
GetWindowLongA
GetWindowLongW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ