ddf9b0d1e8f51cea665159562fb9b27f_JaffaCakes118 | Triage

Sharing

General

Target

ddf9b0d1e8f51cea665159562fb9b27f_JaffaCakes118
Size

579KB
MD5

ddf9b0d1e8f51cea665159562fb9b27f
SHA1

df45143946a1f4437d369f914ef9129a7e463951
SHA256

c3d51e76be179543f02c42b375c50f7ba2f97a246a8787e8a8f8dfb87f7e8403
SHA512

4d788ed4731f373405f03414b4bf8c78f6366bf1e733847314e2b939881f1a11486a82bd64e7da74da92a68779a7d7983bf50132b66ec96db96d69e743bb3644
SSDEEP

12288:3FSQ4F+2HSG/txm0rOtd8Aij943MiP7kL2teBN52dgRAmtd:H4+2HSG/bmNo1j9sB7kLieBNKgRAmtd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf9b0d1e8f51cea665159562fb9b27f_JaffaCakes118

Files

ddf9b0d1e8f51cea665159562fb9b27f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 396KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ