826d0ebf595d9f742f0704b95d7b661a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

826d0ebf595d9f742f0704b95d7b661a_JaffaCakes118
Size

40KB
MD5

826d0ebf595d9f742f0704b95d7b661a
SHA1

15845c815065ce7a7b1ec1c685b4f4634db86a10
SHA256

a381709773b94f3b8577aeeb282cc21835af499a4cf11577715d696ca6ebc33e
SHA512

495a8e38923f67106da0927c656351829fa3ab355be5c584e7fe1f0f17efc4d4b55842bf8d2263387df74a3b891c69392d4147263f21ffba396168c70a2b12ae
SSDEEP

768:XMIOX2e7eLfFz3mQx4sKBQMhS+wjj57yoUi4+BxxKWtNtJ/IUTH+I:8IOXwmqJuivLI2H+I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
826d0ebf595d9f742f0704b95d7b661a_JaffaCakes118

Files

826d0ebf595d9f742f0704b95d7b661a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 3.4MB

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ