395b49c92dd9bdee03c1d69a0d6e918e_JaffaCakes118 | Triage

Sharing

General

Target

395b49c92dd9bdee03c1d69a0d6e918e_JaffaCakes118
Size

86KB
MD5

395b49c92dd9bdee03c1d69a0d6e918e
SHA1

dcc10d53f820a2e0f063ec0ac597aa6cfaa17120
SHA256

1cb7b14574d523837f7b538e8d434f530cdce6b72354cd67bbf6dc23008ba6ef
SHA512

d08e4b0cae6d101b01ce7c95a594416964dc03af904a150f80e03087ce1b62757bc01e65e13702a743220c79ce60f697da3d223cf21e0344c178bd4f7a32102d
SSDEEP

1536:0/+bVmbierA+Vw37Mk7l/myyI6QOakmPTvixhkSYcrmtQJ5a8/ZJY:0/WYbie/S37T7QyJbTqTkKmaVjY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
395b49c92dd9bdee03c1d69a0d6e918e_JaffaCakes118

Files

395b49c92dd9bdee03c1d69a0d6e918e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f143eecfeffb649592de3d13dcfb47a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
GetCPInfo
GetFileSize
GetModuleFileNameA
HeapAlloc
GetProcessHeap
VirtualAlloc
GetProcAddress
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
LoadLibraryA
CreateFileMappingA

user32

GetDesktopWindow
GetClassLongA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ