c878a8e3f37068673114a7f6a035480b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c878a8e3f37068673114a7f6a035480b_JaffaCakes118
Size

204KB
MD5

c878a8e3f37068673114a7f6a035480b
SHA1

77155db0ee4f0867436affb2fd37e1e4264206a3
SHA256

79a21a9b4dbfe41f2c95563430ab5456b95d1b811be361878ba10023d319debf
SHA512

e114da1b3ae1f7ddf4b92dbb5ed00cee9c073c1dec85514c480e848cc23953867c41fec871cc148d9120cf38947ecac7aa0ebfe41ee9340a6a81b4623ca04b8d
SSDEEP

6144:zFA6K6oZShP5NyYu3EjO32NvH9iGuzgLH+Kf:zFA6OShPHyYu3EaYHuif

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c878a8e3f37068673114a7f6a035480b_JaffaCakes118

Files

c878a8e3f37068673114a7f6a035480b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 28KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ