3900d6eec8d1c82b1ef9637b7cb07f01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3900d6eec8d1c82b1ef9637b7cb07f01_JaffaCakes118
Size

535KB
MD5

3900d6eec8d1c82b1ef9637b7cb07f01
SHA1

b0bc73c4e3b39065d1f0cc2788bc2d46e6252f40
SHA256

440cbb466a7a276c7ec8608542e7213ec2ecf4805688492abff99b7b487c2b18
SHA512

6e6f18fd6d435437418e5bb59ff721de4b427ed522181db3e128c5da23424d5b5e924ca656f25fb1775cfc6d4e88b74607804a2f056a57e284f656af01ff6d6a
SSDEEP

12288:Y3eVYO6gJGirhTXYjZml6jzI/uoiJT2r6m1bdv/U7RSaezup+:JVGiFTXYjQEquVJCr6m1JnSA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3900d6eec8d1c82b1ef9637b7cb07f01_JaffaCakes118

Files

3900d6eec8d1c82b1ef9637b7cb07f01_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 808KB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ