edb01a37e569cdb9795e50535649540f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edb01a37e569cdb9795e50535649540f_JaffaCakes118
Size

348KB
MD5

edb01a37e569cdb9795e50535649540f
SHA1

d7ba594c6eb4bf7139f351b6e54a374747fc4f1d
SHA256

dda28b91d3ac9465919fa7d9715c57dc06d0c94b5653b90a614a6dfd471af9be
SHA512

d6e98e9fa67f4d3c59253253b19a09aad38e4f6ced7dd3ce6c0f76eacdf77433f3bda7bf03eefada7265c1fd874f87940fe0509625f7008568feabfa9e04f0b1
SSDEEP

6144:h6tIrAVJWjn6i+jNSJcEpzqzGNW7Q3xVnb5y9IVR93pY6v2AklNo/Pd:h6tIQWj6i+jgO82zGNWcr53XcNAkl+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edb01a37e569cdb9795e50535649540f_JaffaCakes118

Files

edb01a37e569cdb9795e50535649540f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 16.0MB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ