439cd9d374c261bcec36054277770a5d_JaffaCakes118 | Triage

Sharing

General

Target

439cd9d374c261bcec36054277770a5d_JaffaCakes118
Size

1.5MB
MD5

439cd9d374c261bcec36054277770a5d
SHA1

fc63307b55bb3c0384cd026694af1f58d7219af5
SHA256

7ca24d5f18061ffa38ca3c7d32016741cdbc79bd5cd95c6489d19b0bc21050a0
SHA512

90b8838426530cae2cce8d557c7cb291557afb908e97e702d96fce3ace645a9a9b8b7e621b1934bf44a58b3ff4b621b1852145bc9009abc4a69e2f019002ff89
SSDEEP

24576:SnEfi53BFihkp3qYJc9+tSb88yFMeePgta6+ZTQ0ZUpMCZeIVbP2vvWGJRQc0h:uPUKVC9Or8UX/+ZTRZDC3jEvWGvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439cd9d374c261bcec36054277770a5d_JaffaCakes118

Files

439cd9d374c261bcec36054277770a5d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1.2MB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ