ac6da6c96cd2380534f015abb792df4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac6da6c96cd2380534f015abb792df4f_JaffaCakes118
Size

778KB
MD5

ac6da6c96cd2380534f015abb792df4f
SHA1

86184f298780d4a92719cd41ce54ca7cee70b919
SHA256

4f1f7c70291201841332180ea0251f6c605e2eb73d6882ba7ce9c10dff6e5209
SHA512

f3aed8cd7b0c7623a933fb294f7b1e2222410222027f38486e4223c3e5f5b7607ae631acd3d07faf4fe80af93e45423f7146ed8ec1d2e5e04fddf62afdd42f83
SSDEEP

12288:0vw5y90lykAfeVb6oWR1FYGq6f4amhAZ3VkcXulKz0uHTVuLAd7yEQz:Hynl2m3YyAVeZ3Vl+Az0MVAAdrQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac6da6c96cd2380534f015abb792df4f_JaffaCakes118

Files

ac6da6c96cd2380534f015abb792df4f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 428KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ