3a24294b35686fd704d7b5d5929fbb13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a24294b35686fd704d7b5d5929fbb13_JaffaCakes118
Size

61KB
MD5

3a24294b35686fd704d7b5d5929fbb13
SHA1

76eb6c3d8215dc1cc86a69cf126991a5f77065ce
SHA256

a215f63d0a4bc565bd744ae3ffb4b99aae51ee9de6508c052db25586e9e483ef
SHA512

5e5ea8c708591718dbad70ad555c40be0eab7d49139e72a53114e0dacf23c318db2564eee173fab6de9d85ae713e91738b124fd721d72498b6b6cdb8ae44b706
SSDEEP

1536:0FChI1cOdIWufRfjG+Yr2PsIXn6dlePVxLJWv+ULVCNIK:YC2HIWa7Gf2PswkleP7LHULQNN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a24294b35686fd704d7b5d5929fbb13_JaffaCakes118

Files

3a24294b35686fd704d7b5d5929fbb13_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d47fcbf0a81d630b936ede29f913e362

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

user32

PostQuitMessage
GetKeyNameTextA
LoadCursorA
DefWindowProcA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ