d618d55b17b4ccc24f8943fb11297faa_JaffaCakes118 | Triage

Sharing

General

Target

d618d55b17b4ccc24f8943fb11297faa_JaffaCakes118
Size

3.7MB
MD5

d618d55b17b4ccc24f8943fb11297faa
SHA1

e41d51de23824e3e0eb722dacc1eec98d009d419
SHA256

ec1ef2b60e51fb69488aabba472a90eba7139d09d17d0f5f9ad9deb4a62baf44
SHA512

8d164236251d8222c718e980364e0b3288761655722b0de048d2e5ddb5f6a58ced01daf0febc621f974ee5d2dee03fe43f77e91f6d310236e1b9678e3add96a0
SSDEEP

98304:FLFI2e4GQqqUNF23HulTb++2ZSu8qNR8Sf1M3+q6CM3k:FfQPNI3Olj2sI/ne5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d618d55b17b4ccc24f8943fb11297faa_JaffaCakes118

Files

d618d55b17b4ccc24f8943fb11297faa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e879440506cf4efe38bc93b5e432e463

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
QueueUserWorkItem
MapViewOfFile
MapViewOfFileEx
GetProcessWorkingSetSize
GetPriorityClass
GlobalMemoryStatusEx
VirtualAlloc

user32

EnumChildWindows
CreatePopupMenu
SetCursor

winfax

FaxConnectFaxServerA

gdi32

GetDeviceCaps
ChoosePixelFormat

opengl32

wglMakeCurrent

dsound

DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate8
DirectSoundCaptureCreate8

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ