5debaaf4db25fb8adb22f29f0cc94b73_JaffaCakes118 | Triage

Sharing

General

Target

5debaaf4db25fb8adb22f29f0cc94b73_JaffaCakes118
Size

17KB
MD5

5debaaf4db25fb8adb22f29f0cc94b73
SHA1

476c6d84a91c8af4ab0ce2dbb918bff93bd1097a
SHA256

f4c2f4744c7b78b27df0ea7a48c0479650bd8472731f840543f31af1637f7bf8
SHA512

5101230f6e5b523c205bd6c10c8f625687f6670bb6c85558254e380f2024bfa18bd4e47bc5ca618a38cebe3dee12658e9767c844d1fc584394448c7b05c06e4a
SSDEEP

384:5hzHoOOI9Hj0wnfuQ07IBw2rTqxqecx5Xb8i:5VIOjjnfuQ0aK52x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5debaaf4db25fb8adb22f29f0cc94b73_JaffaCakes118

Files

5debaaf4db25fb8adb22f29f0cc94b73_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0931e97555ac33eb10aa9539fe890070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetSystemInfo
VirtualQuery
GetLastError
MapViewOfFile
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
CloseHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ