39c4b139874ea99bf4bdb9c49a9f7b76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39c4b139874ea99bf4bdb9c49a9f7b76_JaffaCakes118
Size

37KB
MD5

39c4b139874ea99bf4bdb9c49a9f7b76
SHA1

ff3dd5e6806143c823d435c8c9a5962313f1d2b9
SHA256

adaea5c28e16df3658fa33f874398fcf12f865e5b14faf3db63a13a9e7f0ae38
SHA512

ad379943b7a60b66208891f20539e029ef6106b56695e59700b2a94939c60e92c60e190e0804ccb9e0810366c3e9d96adddae15ee79ff9415d748a2cab5bde93
SSDEEP

768:ECGvG9ol0EMnqB3niYdMslhQBvQspxOzmnH4f0pL3mnun+DtE3kO:vGOSl0EiQVFsvh33H/pqu+Dm35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39c4b139874ea99bf4bdb9c49a9f7b76_JaffaCakes118

Files

39c4b139874ea99bf4bdb9c49a9f7b76_JaffaCakes118
.exe windows:5 windows x86 arch:x86

acc2d5a4995e8a2fa30305a25124984f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
GetProcAddress
LoadLibraryA
CreateFileMappingA

user32

GetDesktopWindow
LoadCursorA
GetClassLongA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ