14e0f620f05d301dea3bee6b3ff801d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e0f620f05d301dea3bee6b3ff801d1_JaffaCakes118
Size

192KB
MD5

14e0f620f05d301dea3bee6b3ff801d1
SHA1

cb7b4bfefc915c6d954793a519ca0d8bd879472c
SHA256

a143b56e04565ae539fadc24524e1f389d5eb144e2d39dc978bf1bf18843befa
SHA512

e3b0c622eed354565e40dab9fed3e36cd364babd1696e4950269a3a87af9e011fd83a28b33ecf75a19ec7b23c13ddf5307a15b7c22be3ce1eee758bc01eb09f4
SSDEEP

6144:0FvJAfenliFELaCuyPyGzAiaa7aFk9nSl:0FvJAmloipucysnR7aF+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e0f620f05d301dea3bee6b3ff801d1_JaffaCakes118

Files

14e0f620f05d301dea3bee6b3ff801d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 44KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ