7738d6f54e7d6c666e35044f361fd7b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7738d6f54e7d6c666e35044f361fd7b7_JaffaCakes118
Size

37KB
MD5

7738d6f54e7d6c666e35044f361fd7b7
SHA1

88b5cf73da786c4ddebde3003796ffc3332d502c
SHA256

c9cf32a465b44e08a45608ed89009042c4e0a3bb1c81d5927f598ec6c0e817f1
SHA512

4b6e97357733092199f028a5efa0720d196e4ec8060c2bb76e579ab7aad847eb795585506383bea32aef9888437083b53ebb3292498c22e88217ae5022b991af
SSDEEP

768:4W9MTHC7POHYq6rxE8MwEIz3EiIaORfaBezhhQbTJWgKc+rPeebQ1I0rf:4W6TizO89dnORSB4hhQbVZz+rPFbQ60D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7738d6f54e7d6c666e35044f361fd7b7_JaffaCakes118

Files

7738d6f54e7d6c666e35044f361fd7b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0f64b44ca0c850acd079ea96228ffb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CloseHandle
ReadFile
SetFilePointer
GetCPInfo
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
GetProcAddress
LoadLibraryA
CreateFileMappingA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ