b5fdda4c40e05cde1db18ff58bd9a75e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5fdda4c40e05cde1db18ff58bd9a75e_JaffaCakes118
Size

1.2MB
MD5

b5fdda4c40e05cde1db18ff58bd9a75e
SHA1

b7a40e1e4fba16672bccbaa2ae15fb371a786d9d
SHA256

48e20beec21a238839a831672f2f5a7e07a7604ebc8021204dd5983b06a7479b
SHA512

ebac14e8c999e7ee1482eba184176de5dc435105b98da667dd8ea71110d0de564fe2cd38fb603948d28a85448aa0829a6e44caf25a593edf251c42a70a0b081c
SSDEEP

12288:ExZNMuisBHIUBKsu/ZAWbywyzY5cBoZMI9wbu7hxQPyhEG:wAuloUPu/ZYzYOK+lbu7h3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5fdda4c40e05cde1db18ff58bd9a75e_JaffaCakes118

Files

b5fdda4c40e05cde1db18ff58bd9a75e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bddfe079422176952d8fbba1dd40df29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pd.pdb

Imports

kernel32

GetProcessHeap
HeapFree
HeapAlloc

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 239B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ