d33f93f9c7291102dfe8ac67d4ada702_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d33f93f9c7291102dfe8ac67d4ada702_JaffaCakes118
Size

181KB
MD5

d33f93f9c7291102dfe8ac67d4ada702
SHA1

e2bea0bafba4e7b78d0fbd3c0406e80f78e33cf0
SHA256

f6d28faa5b10c71ae7599cfb4e812c022ebc4d3d14e4ea85836c706d9582ab91
SHA512

835d441a945d670219eb25297618ccb9f7a7f5cc51b3c9d698a98ad5a84481e43ecd48336784777b46d1ab8a57947530cce7a3042ed26b749666e0c5c1d6b65a
SSDEEP

3072:bFwquVOPOe3m+mK0WkTqJhcSUv7yOJ2e/XvTAE1Upj7au1C7q7tgTRRh0Z9run:bFwqxOe3uKW+hhUjyw2e/0xteu1Cu0hl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d33f93f9c7291102dfe8ac67d4ada702_JaffaCakes118

Files

d33f93f9c7291102dfe8ac67d4ada702_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 32KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ