1ac4a3d8963f16c458f8b27920838ff9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac4a3d8963f16c458f8b27920838ff9_JaffaCakes118
Size

298KB
MD5

1ac4a3d8963f16c458f8b27920838ff9
SHA1

08be5c6df74e57dd79fe2b9ad89d90ff25f89e62
SHA256

aedba8299d16614bf103a097b5af661cf57a64764211419e13c929bfd2ec7562
SHA512

720f1fc09493232e53db3759677da3a986d0405ca7ec1da5661530883dbefe12e2393d30842f97b0c803a68615a1b1f1ecf2f77476ca29b47587b4ffd16cc7ff
SSDEEP

6144:SFk228nnkipqcTb9pmWHG/kUdFjHkF7S43KOgfQI8J78s+aueFJzEQL:SFk29n1XTfmWHGh5smfj893+aIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac4a3d8963f16c458f8b27920838ff9_JaffaCakes118

Files

1ac4a3d8963f16c458f8b27920838ff9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 284KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ