00755f86c3dfe39e83fe02940cac436a_JaffaCakes118 | Triage

Sharing

General

Target

00755f86c3dfe39e83fe02940cac436a_JaffaCakes118
Size

333KB
MD5

00755f86c3dfe39e83fe02940cac436a
SHA1

3e385b002f7bfc3127237f0af3a32fb66bccfd68
SHA256

995438a5b261557b6fd0856dcdd677009b82ecb443e69d7b4c8c4f88d0982643
SHA512

5597dbc8b2fb58704372c549153ae975dd9e6fc3a0d393e9c465354ee04b3d9069a3a98ab79d638bbd241a563f2c7f713f779af722b6d5e483ab12c45795df3e
SSDEEP

6144:dFnB8LNj+pcmVJcemkVLO8/ygsKwTsVGaAnZNj22mTgcYENwpNQK+b:dFnBtpcmTXmk1O8/ygsKwTsVdALj7cWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00755f86c3dfe39e83fe02940cac436a_JaffaCakes118

Files

00755f86c3dfe39e83fe02940cac436a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 612KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ