02af48c0a7933d5281e68d3d8c9d895d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02af48c0a7933d5281e68d3d8c9d895d_JaffaCakes118
Size

230KB
MD5

02af48c0a7933d5281e68d3d8c9d895d
SHA1

02fb9bf3f6fd5deb7b0d1c7904cc0b64e9eff706
SHA256

1e27cc8e2d2b2d18c5435cfd040421fc77e233cab8726d9aeca5d7532b7a3565
SHA512

9db2db64d6150f21b0b839cd6e5196d20245f70c57ef5139387cca9b3db3d2a7d365d1e29e9a8fc95da190096f134185bb9af3c4fd965a8fce32ccddcd405cbe
SSDEEP

6144:aEe+k5UnUEg5weI1nEpOG34/gmEds861/:3Hy+UL5VI6pOG34/gmEK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02af48c0a7933d5281e68d3d8c9d895d_JaffaCakes118

Files

02af48c0a7933d5281e68d3d8c9d895d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6a03a3064f2cc761e832f319edc7a08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

GetWindowLongW
GetDlgItem

kernel32

GetProcAddress
GetDiskFreeSpaceA
LoadLibraryA
VirtualAlloc

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ