09ac2d5d99598d35c3a3360a2865dfc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09ac2d5d99598d35c3a3360a2865dfc3_JaffaCakes118
Size

500KB
MD5

09ac2d5d99598d35c3a3360a2865dfc3
SHA1

096a37c3a8e51838ecc69d7c706a67bcdbeb14ab
SHA256

6a76ac7826759bef8cca437a6a557c755b3cac2c51574c369a90d676d38d1da6
SHA512

d54ba6a1170354c3196492e47e5d1c012ce856d0773d8394382356a2cc737744327e0a3662cfbc92b5263020631fb05bb63c5ab2b2e0c829de8a2a9f71b1849a
SSDEEP

12288:KckWnBHgAZ4YNXEhx8VTD9Pyr0/CnrqtsUHha:VR4YN68Jpqr0urqCP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09ac2d5d99598d35c3a3360a2865dfc3_JaffaCakes118

Files

09ac2d5d99598d35c3a3360a2865dfc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1.3MB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ