c26faa95fa05045b48a61d33c5f50bbf_JaffaCakes118 | Triage

Sharing

General

Target

c26faa95fa05045b48a61d33c5f50bbf_JaffaCakes118
Size

281KB
MD5

c26faa95fa05045b48a61d33c5f50bbf
SHA1

91702ad6c4cf701b069eb0a3b28527f06622a745
SHA256

36b17d38c18fa4f05598264b2db9f2299b6b2c0e4468202260607372b8c7eaa7
SHA512

2c0bad3651d5fd75c0ce3323e656683cd8925aa81e9f75166254a8d3dfe6868f499464880e3dcfaccf707aced71187b1caaf4363e1cb8fd47cffdd36ea072ba8
SSDEEP

6144:VFFbgRW5Fyr/FIrbfJoch3ZehU2kQqCDO2jwnCoy7vkybV:VFFb4W5Ir/Grzfhpl25vDO2yCt7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c26faa95fa05045b48a61d33c5f50bbf_JaffaCakes118

Files

c26faa95fa05045b48a61d33c5f50bbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 172KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ