62ff7bd42fa54a8b9008653d748f81f9_JaffaCakes118 | Triage

Sharing

General

Target

62ff7bd42fa54a8b9008653d748f81f9_JaffaCakes118
Size

693KB
MD5

62ff7bd42fa54a8b9008653d748f81f9
SHA1

b864c5d2adb7fed50b4394a835d9371d5055438d
SHA256

409ae7937e0b1476bc08a35cca8ba8c85abaec8c87a099f1e3965a8cbdb9494d
SHA512

53e85a0abea8a5a11183a740452c60dc542a5ed21e657aef8d6f689f8d3489834b99dd8cf5b0b5f243dcfb8624a70173a5c5e52ac3935fd6e1493c1c0a16b745
SSDEEP

12288:jXM8bU1CYNYbeiaYim5wayjlkOaFYGq6vB+yd4cPVeTQDXsD1vdO8T1Nu:zINybFaY35wa82Yy9DkTkXsD1vdOa1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62ff7bd42fa54a8b9008653d748f81f9_JaffaCakes118

Files

62ff7bd42fa54a8b9008653d748f81f9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 552KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ