441309ff9fcff1f29afddfefc3c567a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

441309ff9fcff1f29afddfefc3c567a0_JaffaCakes118
Size

208KB
MD5

441309ff9fcff1f29afddfefc3c567a0
SHA1

99589fff2c8309a98b5c0e9badcd4c91f741b230
SHA256

13fd6438a35b72557d062ea5fb48239dd52293634a3406cc11de709b3f314b62
SHA512

e0a8ae6d82578a5ac7adcb841cef829f8eff01a32f0314121d993cb92f2a22f6b601c1a2c105aa85e5d91ad20cf550de6f384f26e8ab20d72fec54a514642a42
SSDEEP

3072:bFwquYKss60+wCkMOI8MBq+uAbaJYHQAiDCEn0ByTfzk6HiHovTM5gL8xZ:bFwq1Ksb0+OMOI8iV5ayQjB0wT7zBI5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
441309ff9fcff1f29afddfefc3c567a0_JaffaCakes118

Files

441309ff9fcff1f29afddfefc3c567a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 32KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ