293096da2da6994c5314d4964db5ffa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

293096da2da6994c5314d4964db5ffa8_JaffaCakes118
Size

37KB
MD5

293096da2da6994c5314d4964db5ffa8
SHA1

54f2a35f09cb13ff8c8f42beb84ef314910f66d2
SHA256

c2e697d7942ef72995e942a7762b8ae737ba5f9cd4d0839f78d8a90c0c947899
SHA512

bec8ee2cd00695ce7157176cada31d7f925a51deda98234a547796335f402a2618631fee2f213b7e943e17cfb46472b49efd89e139e68152c653a2f3056c928d
SSDEEP

768:Po8aRaG8o8KjFoj19TCv1KyhBqTfvv/wpvrsKx8QxlZbtXr:gDRX8VbuXqTfXmIKx8QVbJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
293096da2da6994c5314d4964db5ffa8_JaffaCakes118

Files

293096da2da6994c5314d4964db5ffa8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e9227165ee6f7d3628d56e83dd2718db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
ExitProcess
HeapFree
GetProcessHeap
HeapAlloc
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ