6fc4078c92239ae0b6928d78ae4fc30c_JaffaCakes118 | Triage

Sharing

General

Target

6fc4078c92239ae0b6928d78ae4fc30c_JaffaCakes118
Size

399KB
MD5

6fc4078c92239ae0b6928d78ae4fc30c
SHA1

e8407057aebe63d974fa249274cbf92affa3b69e
SHA256

96783fbf42d0a1b38a41852cdc83118a1a04a0594545da102c5ee81184d24e5f
SHA512

8e673f4993543ff127ae3411156bb9ef4f228e4a22c39f5c0024b0d820704a315f53c052a9398d4620b7978b280a1f296264053a58f3dbbf64f19fcf463f91f9
SSDEEP

12288:+XcxiW/PnOOH5NQWqMF3cDgl8FYGq6h3m:lnxZNQKcDg2Yy1m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc4078c92239ae0b6928d78ae4fc30c_JaffaCakes118

Files

6fc4078c92239ae0b6928d78ae4fc30c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 80KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ