6abd2687740244b036ee4f8f61d75b66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6abd2687740244b036ee4f8f61d75b66_JaffaCakes118
Size

173KB
MD5

6abd2687740244b036ee4f8f61d75b66
SHA1

dcf2a6ea20b5030d76b7de0db6014cd0f154a73d
SHA256

de0b9fbf4093844f41b37bcab61a415d471ac72e9a5f80badb8d8b4cf55086aa
SHA512

81e1b917c8ec21d3b5329e946c9e53d77e8ef78da69700ddb21aaf9835d6f79b889c34032824f4c827f40b76e4ee87777ac53017eb443cb109e22fb4a7067e1e
SSDEEP

3072:lFQKe4Kk7zwqxTso85yWzHEYe8rziSkez7qg+EGTTqhUXlDAu5dk4KycbOH:lFQK8k7T5ssWIYeUzFD87TTqG1k4KHe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6abd2687740244b036ee4f8f61d75b66_JaffaCakes118

Files

6abd2687740244b036ee4f8f61d75b66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 7KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ