04183167eacd68961a3399f7028f0ae8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04183167eacd68961a3399f7028f0ae8_JaffaCakes118
Size

233KB
MD5

04183167eacd68961a3399f7028f0ae8
SHA1

97fee4a9b7c227c299539d556471e278399c8b52
SHA256

a61c6fc72d0f9e05b02289d768235761a1c5cff943dcfdb2c7a0e10f944d82eb
SHA512

ff5fec5a7ac512094859c61815a64e64f7c78c9ce93ec985d0440a7d84c7f9ba232bb41eb7b27292d52bb8130b7a6313aad52c30b212d10d75d5ec4192436675
SSDEEP

3072:fFPpmYUFrzE5np9PKXxpHVa4CHzg6v9jb9znJUprICMty1ajih2DQ1/CEo6K19:fFPpxvQD1alzR9zWhHMtvjihZt9oZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04183167eacd68961a3399f7028f0ae8_JaffaCakes118

Files

04183167eacd68961a3399f7028f0ae8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 44KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ