0d13642056a92cb228c51bac1e3bf739_JaffaCakes118 | Triage

Sharing

General

Target

0d13642056a92cb228c51bac1e3bf739_JaffaCakes118
Size

350KB
MD5

0d13642056a92cb228c51bac1e3bf739
SHA1

90dbcd3e9fb78188182f82736814f7faeff8eec7
SHA256

51630ff215dc475e6747080568a5e83bacb7840809f0d83c131acb75eb2696c3
SHA512

8c013c8abe4190dd79e8ad40caae3e569abd9b9c061a2cd94e9f5e67f127c3d0ea65ddc18ded13616eef1d13723008c3a7627040d2efec40d7dd8c2d4a972390
SSDEEP

6144:V6ad13kBF2ecynyKrjcuBAC4oUyTDVuQxC2ibsHHJS8Dw8xAZo:V6013M6ynyKrjcuEoVVuuC2IsHHJS0w8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d13642056a92cb228c51bac1e3bf739_JaffaCakes118

Files

0d13642056a92cb228c51bac1e3bf739_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 16.0MB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ