747b8f1fd86ee68b6b644f6dde9fd67b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

747b8f1fd86ee68b6b644f6dde9fd67b_JaffaCakes118
Size

37KB
MD5

747b8f1fd86ee68b6b644f6dde9fd67b
SHA1

6b4f69b7c3d0ea27f655d95bb08e6ddc08f760c3
SHA256

10ff023aa0c3f76b84e2a0c16f73d88a60c7c487772d53bc9eda5c3fd38f3ab3
SHA512

b66a54c1570593e2ffb31db42979ec06f4dd419c6134a5b04e4bf15412b3fb223667325652a8d18fb9586d73e9a3d3d96bfe50cf54666a47214730294eaf1d2f
SSDEEP

768:e3KPgWSEh4i4VIBvWfO1XxDAMl6ofEZtuNJnRorKvzlijv4DPP7Me1vT:phr4VxfIXlLdfEZtuNJurUzlE237MOvT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
747b8f1fd86ee68b6b644f6dde9fd67b_JaffaCakes118

Files

747b8f1fd86ee68b6b644f6dde9fd67b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdb1d71c1a9e48c9ecb09efbe6cc9ae0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

user32

PostQuitMessage
GetKeyNameTextA
LoadIconA
DefWindowProcA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ