d1f6bffa192386404ff7cbfaa9bf2383_JaffaCakes118 | Triage

Sharing

General

Target

d1f6bffa192386404ff7cbfaa9bf2383_JaffaCakes118
Size

224KB
MD5

d1f6bffa192386404ff7cbfaa9bf2383
SHA1

c6ed72114b398e13c11733cd9db971bcfffcf689
SHA256

05c7e55e7f7e7533eb0230253a0e2f4383c9685e094a145ac132ceef5aad80c6
SHA512

517ea787d926178fa401fea0bc87982a73a207760229a7a1b4c21338d1dc205495e0bc5d0da74d873f84a52351548e064e45c00c9fec08acf1e4ac6ad1bf7e72
SSDEEP

3072:lFgahWxQWXuaraoQ/6zV7iIJPGeevWYIdjKV2IpyGqEl8M1BjF3Z1lW9C1eSTiz:lFgaYWSaoa6YIH5YI8VlJqm1d71Y9CCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1f6bffa192386404ff7cbfaa9bf2383_JaffaCakes118

Files

d1f6bffa192386404ff7cbfaa9bf2383_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 36KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ