b3b6e19743a94ade5b9bd5c16af75a23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3b6e19743a94ade5b9bd5c16af75a23_JaffaCakes118
Size

16KB
MD5

b3b6e19743a94ade5b9bd5c16af75a23
SHA1

0b356a31af6662f40a294cacf6ba57938e687862
SHA256

a8ce31f1504601cc1d6f6fdd3dd4cbd15c0bcaf204eb7f5b1b7438000110a314
SHA512

f850eef384c74de3b63abb28c098f9d7e7a07fe413326dc70ba7b9fd188a33d031ab16c0fd78ae7761e62e9be14458dd692c8ed497bf8f0e93b067d5d40aa3f0
SSDEEP

384:mpcHoOOHu0AeKSbMwh+iiRqT+oZfrHxAglja4kgWCIG5pMHoVSIK:FIOOXK2Bh+iiRqDZTRAgta4kg/LMHosT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3b6e19743a94ade5b9bd5c16af75a23_JaffaCakes118

Files

b3b6e19743a94ade5b9bd5c16af75a23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\XRoot_Build\X5.2\Vm\release\StubExe.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ