2886b13a9ec76c881f59d2e6269ca23a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2886b13a9ec76c881f59d2e6269ca23a_JaffaCakes118
Size

1.2MB
MD5

2886b13a9ec76c881f59d2e6269ca23a
SHA1

c8da83a8ebfe34ca9e98114efe5eef863ed047ec
SHA256

733ee11bdeee76e914237b3bcdb6153106a58cc2a88eac07e28a834bf09b84d7
SHA512

09460f3ec69a305556cc2eb4164c7278475cfe093b121b1ec106eddbe67973ca907a670bd9496a1c9f6d65d592d7a09f9147e3fd7bc2070aa6f26ba958e6bdfe
SSDEEP

24576:QyAe5dGVMTg+2rMT9qfKR9YN+l3qVc4S+61m2e9JxvV2bX:Xd+Zo5FY0VqVbM1mZ9Jx9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2886b13a9ec76c881f59d2e6269ca23a_JaffaCakes118

Files

2886b13a9ec76c881f59d2e6269ca23a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 860KB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ