76ed70c7ad659cc7d5561d9324230755_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76ed70c7ad659cc7d5561d9324230755_JaffaCakes118
Size

382KB
MD5

76ed70c7ad659cc7d5561d9324230755
SHA1

7a5ba30d79e3f8e5bd9939e8eca9dc5818f1a11b
SHA256

803eb11e116c61f48fd1ae68d33d1ecdec1ed1df057a1cd0726a5a04c5e32ef2
SHA512

40860a3a9dc7d1285c4aef458ecc38186b89dac02ed90845703b1a08f93350d72e76ca9ce23611888f8999d2d499b878de00b7f0d15342aba354e7096c41624f
SSDEEP

6144:4OQC0dfXGD3nry6G38rHu9cxYmX8dDYDvDRF19lALjJoxGq6IEt/2i2H:4OQlfary6G3ZA5TfwFYGq6OiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76ed70c7ad659cc7d5561d9324230755_JaffaCakes118

Files

76ed70c7ad659cc7d5561d9324230755_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 80KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc_
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ