b7754232eff25980b943f0597550a22c_JaffaCakes118 | Triage

Sharing

General

Target

b7754232eff25980b943f0597550a22c_JaffaCakes118
Size

842KB
MD5

b7754232eff25980b943f0597550a22c
SHA1

1cc1c1721fd352af483f7f074ac792f9a1109825
SHA256

c96a2eaed1ab7f87117df0b556b67c4e4b8f0e694751494de32ea27701cb5a1e
SHA512

6c790d2c826c51f2166af64e2d83fc54c73c2cf6f6769a818cdb33461cb91f50f054c5d124153591fe5f115ab4bcd38981b0f5b18b9de743fe9f91132104b665
SSDEEP

12288:6XYuKWK26jtpuHbsmZLEr/+QgwmmmFYGq6ZMVdkkjMk2WYewmUuke4L1/Oe1Iwcl:SKfXtpu7smZwL+8CYyZMV6mo5mUlpDy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7754232eff25980b943f0597550a22c_JaffaCakes118

Files

b7754232eff25980b943f0597550a22c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1000KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ