ded4d77446da0404ac573ba23b87d424_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded4d77446da0404ac573ba23b87d424_JaffaCakes118
Size

649KB
MD5

ded4d77446da0404ac573ba23b87d424
SHA1

bcf3a784aa726b3d52f23c41c6dcee011ec5bd16
SHA256

d0ac466f5fae639a63fdfc275649e326f6a23d24ddfa7e24fa725c99bc21ceba
SHA512

d9dd52f4ad4eb49d4fc69af2cd34c63fd2f9c4bddce15ddcd94a66e74593f4f3f97e40144ba3bb8ce94f20d9422b643bd4f56b5fd38f6ab2f7fe45a0b678d9c5
SSDEEP

12288:sXsdyWZo9oESUR1lXQBmvoEtVPi9QGP6+FYGq6WyiNxLZkRhnR8rD:zyr9r1lXVwEtVii5aYydG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded4d77446da0404ac573ba23b87d424_JaffaCakes118

Files

ded4d77446da0404ac573ba23b87d424_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 352KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ