0769e2260f1f29ca92872efa59000eb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0769e2260f1f29ca92872efa59000eb2_JaffaCakes118
Size

19.0MB
MD5

0769e2260f1f29ca92872efa59000eb2
SHA1

905923fb29e4d1de0d31b1ef6ce036d9e99eccf2
SHA256

924feba25461cd9b368f0e652e7fe9e40ed26c114b35c942e2666a2e74095289
SHA512

38d1dcff1a4ea75d781a7400032fcfb8efea6dce5f75a748df9a3e8f33002eaa99e12cd4d0a4f66c8b824605b06274cd711f694e8d88013cc53f17592a857109
SSDEEP

393216:dBo010uw7AAOmSvPS5NRS6UbXZyhbiWomDK5KGKfiluZd/wKxn45Oc+OszEX:dBo010GvPIzUbJ6bXW5xvxK9s+9QX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0769e2260f1f29ca92872efa59000eb2_JaffaCakes118

Files

0769e2260f1f29ca92872efa59000eb2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 12.9MB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ