e254933b9b97f65a826ad71a939425df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e254933b9b97f65a826ad71a939425df_JaffaCakes118
Size

37KB
MD5

e254933b9b97f65a826ad71a939425df
SHA1

27a55f52cbe08c3f0acc78096b58ae2856872092
SHA256

4f6357d1528051b6604d2bb5cd3f39f25b04b4cf128954804d6f20d918d0d1dd
SHA512

dcc21d0fcfd570fcd07e327f8a7719d9837053167827af405ae9edee90d0a6f80a832be48832543e7d1e414c91e62744df477e1f4d015e7a4ea01a0d080d75ff
SSDEEP

768:wVGeqAKQDo3ceR3V+0qy97lLCSDu7xsvNfhGa8rXAc/3i75211rOs5/yBYp5:wVGBBQOcepV+0qy7tCT9SNExTAGyOysf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e254933b9b97f65a826ad71a939425df_JaffaCakes118

Files

e254933b9b97f65a826ad71a939425df_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0f64b44ca0c850acd079ea96228ffb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CloseHandle
ReadFile
SetFilePointer
GetCPInfo
GetFileSize
GetModuleFileNameA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
GetProcAddress
LoadLibraryA
CreateFileMappingA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ