82d189a893d04af69492e7e49d9b18ea_JaffaCakes118 | Triage

Sharing

General

Target

82d189a893d04af69492e7e49d9b18ea_JaffaCakes118
Size

16KB
MD5

82d189a893d04af69492e7e49d9b18ea
SHA1

7809aa26d46ee5fa7bb16a05393124eebc33eb82
SHA256

c99a42421d5871b8419d0afb4d4a0d2295e7aa2b9e23078352e2d451652092cb
SHA512

f844c9d3a10d602f0ec9afb20e07d8aaf977b736ead364d7be8f97bbcb174527ba1d7f70658f7d1d93cf06837161a7b652f651715034f7b4a6f891cdab4dc5b7
SSDEEP

384:K+PHoOOYwh+c/iRD0WeKSbq5CWUyrTi+cgNKaS7/KYsTMzqYO0oYu+RPP2n0:KWIOMh+miRGK2q3U8Hcg4aSbZzqYO0oX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d189a893d04af69492e7e49d9b18ea_JaffaCakes118

Files

82d189a893d04af69492e7e49d9b18ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d870915cd3d95b0df885669e5e74306

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetTickCount

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ