dc8bcdba90baee607556fd16ccde18ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc8bcdba90baee607556fd16ccde18ca_JaffaCakes118
Size

199KB
MD5

dc8bcdba90baee607556fd16ccde18ca
SHA1

c414c18e173a7be17c5901ed232ee9f14d7cd008
SHA256

9815b759901e00bb9967dfa5fb4d3207134995c4ed7716bd7bea7a82e4d24384
SHA512

4edde87135f44e8617fcc00b8f4c19f5695f69350dfce42e04cbc80c5b2a499485718c60fefd285b39a270ec68b3c7b55315e77363c7873350435a244a5624df
SSDEEP

6144:Fogao7yTRPFkgAZxc6FPT6YUE+lm/kY8PQmxE:FogaoOBF7nVW+lm/9gO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc8bcdba90baee607556fd16ccde18ca_JaffaCakes118

Files

dc8bcdba90baee607556fd16ccde18ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.TEXT
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 36KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ