b3835f5240d6cb6b9e2cc641c126a3f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3835f5240d6cb6b9e2cc641c126a3f2_JaffaCakes118
Size

205KB
MD5

b3835f5240d6cb6b9e2cc641c126a3f2
SHA1

daa26e0b0501c6803cb44492d54c04ca25b90be1
SHA256

c373de52c3a8f55d98a6fb3a7c80e10fb6602e407e95514e0362442aba7742b1
SHA512

80a6e08505f72c0a63f5f883d15cb6ab1e52bf0af4cd1a04d4dae02ccc8439154006f39cdfd2157902e6faab4006c4ac0f46582f5fd929833588d189b2b8ad84
SSDEEP

3072:9FQ6g/VUJjU6P3x5WWKCGL1DABnrVZuIL2euY73Bstgi9dy1VS+E9FibT:9FQ6kV6j7TWBInrVPBugBAyr09F8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3835f5240d6cb6b9e2cc641c126a3f2_JaffaCakes118

Files

b3835f5240d6cb6b9e2cc641c126a3f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 20KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ