08fc86ec3ca96da107e091e661cfacdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08fc86ec3ca96da107e091e661cfacdd_JaffaCakes118
Size

729KB
MD5

08fc86ec3ca96da107e091e661cfacdd
SHA1

b916a478b2d57ae930246f1f35c25862743568ce
SHA256

657dca0f41d035e591420a9fea593b0a08603fdae1339261cf8404c1cc9ced0c
SHA512

5992d1b52474e566800e98bc1bc45e0fcf133ac0951a74441e501c06d4c0d191b29e1048de97bf4499ac2a5dbcfb4667569526dc646126ae00f0995d6423b3af
SSDEEP

12288:3vw4+r+/Wa+3eNFSjgpw66OhQykpMA99DHMzkWBT6hihUJ3SzcqMKgmfQbTDzf:76++LOukhkpJ9zMzkWTq0gqMyQbTDj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08fc86ec3ca96da107e091e661cfacdd_JaffaCakes118

Files

08fc86ec3ca96da107e091e661cfacdd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 440KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ