94e44fdcef53ad03e88732c36b6ef61d_JaffaCakes118 | Triage

Sharing

General

Target

94e44fdcef53ad03e88732c36b6ef61d_JaffaCakes118
Size

3.9MB
MD5

94e44fdcef53ad03e88732c36b6ef61d
SHA1

98574c7d57b5bcf4d948eb90a4a4ccbf1a93fa5a
SHA256

5f0b709c7812188f08b64c70c71dd771c2a52d3c1c2fd171b43f2adbeabf395c
SHA512

91e3de949465dc907109cfc8c9a73f722fa521401a35077fbc338a27e16b179986cb9a74a246e04176b93e11c86fb7f649667fde42c20a3d9c42c97084e97687
SSDEEP

98304:zDzu2kc065Fd4j/n8Q+cxqDE67Qfk8HfMUCfg528h:zm63de/n9x6Ef/H1Cfu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94e44fdcef53ad03e88732c36b6ef61d_JaffaCakes118

Files

94e44fdcef53ad03e88732c36b6ef61d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 4.2MB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ