324bbc3c4c3d31d9d23839dd3822ff62_JaffaCakes118 | Triage

Sharing

General

Target

324bbc3c4c3d31d9d23839dd3822ff62_JaffaCakes118
Size

17KB
MD5

324bbc3c4c3d31d9d23839dd3822ff62
SHA1

acf0f7f6b9ca5f3814d722ad3be4323c2de88916
SHA256

dad102d2c0cbd9ec353dc0c3634ed8a0bf42d8b9e50311cdb69c03e84d602a5b
SHA512

fef30ae6eda700177d2050496b69d73b8e4589e35ae21e0bf7abd54e52015cf604183dc91f726de5ad8ec234ea1949609ff1e7a82baa1e480476dc40664e63a5
SSDEEP

384:l9Eh3HoOO9KOpbA0EICjw7OLy0yUCSJl2Ia9t1LmvUxYowWzZFW9lObtMPPh36:Y5IO++e7OLvyUzD2IaAvUxYowTPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
324bbc3c4c3d31d9d23839dd3822ff62_JaffaCakes118

Files

324bbc3c4c3d31d9d23839dd3822ff62_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ