a8632bee7ec4953b712a826b0ab6b47c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8632bee7ec4953b712a826b0ab6b47c_JaffaCakes118
Size

247KB
MD5

a8632bee7ec4953b712a826b0ab6b47c
SHA1

52b046a577cc39e32ed1293629f3336c482a7146
SHA256

adb933ab538d6abf7336728abfe3fb41ea76899c3dbdfeecb5e7c0b558594bbd
SHA512

7354d46bc779729410652fe2180b210cdad895b37c3351ae2771a2392fb67ab5269126c9035025762405103879bab2dffdc50ea7c62b7ce0abc77b3c5ebfd137
SSDEEP

6144:HFga3qQebFEGSz6XfszmDUHCNGJI4G1M+Bnv8+:HFga6Q7y86UHhJIf1pT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8632bee7ec4953b712a826b0ab6b47c_JaffaCakes118

Files

a8632bee7ec4953b712a826b0ab6b47c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 36KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ