f072534bc1870a44ca4f62e7acf3b4b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f072534bc1870a44ca4f62e7acf3b4b4_JaffaCakes118
Size

757KB
MD5

f072534bc1870a44ca4f62e7acf3b4b4
SHA1

781088437a18f394b26e77346b50b9888f70735d
SHA256

586b7763bfd7f9b77c1fe67d917a73859be96fbdbcb0fddea63a98b707d436d9
SHA512

07ebeec3375eae01c9c54e0970eea824f246629ca8ecc254110f17d75673b7f8bf8cf63182ed658d8cd73269b6627ad20ab301d57198e1a739033d901665e9df
SSDEEP

12288:hFnBgh67kbHp3t8okJfBSEILZXOY8cIt66i4IDEEXMsRID2GbmdIZb3FQH:lXkbHpt8dcZXKcQ64IDhAZbgIxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f072534bc1870a44ca4f62e7acf3b4b4_JaffaCakes118

Files

f072534bc1870a44ca4f62e7acf3b4b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 596KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ