a5857a4ccd308d9d73b9096b7e703cf6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5857a4ccd308d9d73b9096b7e703cf6_JaffaCakes118
Size

2.8MB
MD5

a5857a4ccd308d9d73b9096b7e703cf6
SHA1

8c256c58d3d46963e40e563f33024e5af42d09c8
SHA256

6a4386c2a00a7464cfc1258555fe5a021908f358724e492fc38ded7bb246e085
SHA512

ca710e058486201692548049ac4fde7cbb80887be26618350d2cf6caa05fb750432da3b5d6511bc70a3b25c13b030ea45b65b7aa9a450940ab487be7b1c8c0dd
SSDEEP

49152:K4pjM+CPxW6Pcmap24Mn++7RnZ6uZNKqtskJXWdoYoKMAR2UENkdMWgQsZ:KGPCPxlA21TT97KqtZJRxKhjENOeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5857a4ccd308d9d73b9096b7e703cf6_JaffaCakes118

Files

a5857a4ccd308d9d73b9096b7e703cf6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 2.9MB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ