c1f092d86eb18b57f1ba4219766ed36e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1f092d86eb18b57f1ba4219766ed36e_JaffaCakes118
Size

137KB
MD5

c1f092d86eb18b57f1ba4219766ed36e
SHA1

e6f8bdb04d3d04155eeda5486958c74a8a6f0878
SHA256

c2c5d26dc326dc01bcaafbd64fc9efe8990f6eb3433a79c6b2d53ba670cd083a
SHA512

2e21ec5b2ee1a0003f7b9f9292a784e1bd56071039aacc07479fa93bf38fcd2a3ee99ba6ab3eedf90aa461b7493a3d270e1ecc204e69716790046afe2c483103
SSDEEP

3072:SXoOEGY+X4v9QReROxBPizYtIuWi2BwIOFJAb:SXoXGY+X2bEiMdz2BwIOrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1f092d86eb18b57f1ba4219766ed36e_JaffaCakes118

Files

c1f092d86eb18b57f1ba4219766ed36e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.TOXD
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1.5MB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ