de15f8b594db588fd9026193ff2a5320_JaffaCakes118 | Triage

Sharing

General

Target

de15f8b594db588fd9026193ff2a5320_JaffaCakes118
Size

85KB
MD5

de15f8b594db588fd9026193ff2a5320
SHA1

9f0182d490796c45b137c594da8252b41b2ffddb
SHA256

cb8efee649be1261131f08a821647c823be8065a70a3ef8453ae8a1088f1c4e5
SHA512

6cd77e3f44a1373142f6722235c8092bd1c6710b4a05dcf7d9151c1ddf9f361fcb4eca6d0330a082e19e927a53192784a42b4ee1590b7c4c221483ea733df161
SSDEEP

1536:O6rPoyHGkEBkTh/qzxnHlNbPFm/6DqdnNeEgWKwwkfqaJM86u2b56CuKRSe3Z0qd:O6rPoyHthctFhPO6DqdNaww/aG8+b+K1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de15f8b594db588fd9026193ff2a5320_JaffaCakes118

Files

de15f8b594db588fd9026193ff2a5320_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d47fcbf0a81d630b936ede29f913e362

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

user32

PostQuitMessage
GetKeyNameTextA
LoadCursorA
DefWindowProcA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ