103d0b44cb684ddf49e72d3cc3745478_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

103d0b44cb684ddf49e72d3cc3745478_JaffaCakes118
Size

735KB
MD5

103d0b44cb684ddf49e72d3cc3745478
SHA1

894545bed367127f69899bce7a945f6ec5d7521a
SHA256

7b0fd4e0d0761def48faae8c00ae7be499c9f6ded645988c894b4ec7aff6fab2
SHA512

a3ec19589c94c1adc9e1c7fd9db4e7a7ac1e5ad9f652241ce24d27329f73d080bde0524135bd682d13e6103f90bb9d28d96ef7b7099014150ca945cecfd6803c
SSDEEP

12288:ovRkP78hv2aBrx+MhtCXMCDQoyazsf6YKBpkfm+W1vxtc4NdL0rr8nTD+nWIe:XPDkrx0XM0wCp+cxtyr8TqWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
103d0b44cb684ddf49e72d3cc3745478_JaffaCakes118

Files

103d0b44cb684ddf49e72d3cc3745478_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 428KB

.idata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ