f5ccfeb1a7c3e025ce893104298740b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5ccfeb1a7c3e025ce893104298740b1_JaffaCakes118
Size

1.1MB
MD5

f5ccfeb1a7c3e025ce893104298740b1
SHA1

eeae71a5a23e76f488bc89b83769fb3aedcb348c
SHA256

2e18a09fadbc8091c4f7e5a50dae04fffe4dcbdbbb29b12a519e8f1aaa2abbba
SHA512

f08b3b7d58dcb73901800ec8fe01b0b72035ff7eba9c946dbb094789102f458031ba1f40abe64ac079b12a2f23c2c3a69221aa359b6d307268f2f1fd7d3bec18
SSDEEP

12288:9XcaLo2WjSRNHOt2wkMkHknk8hJ9G0zQgDQ1XV2DHLSzp2OVZ2bR0FYGq6mCnlWi:Oyn2D0jVZSRIYyx8X3MdabOseg1XX6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5ccfeb1a7c3e025ce893104298740b1_JaffaCakes118

Files

f5ccfeb1a7c3e025ce893104298740b1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 856KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ