2d5a7fc691f74c3471e6956310d7f737_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d5a7fc691f74c3471e6956310d7f737_JaffaCakes118
Size

228KB
MD5

2d5a7fc691f74c3471e6956310d7f737
SHA1

39eaced99ab211c38cf7da532050b13590163549
SHA256

23677602f92f36eea4862cec4a17570cec11c9ca49adcd52ba72202cb4b1d4b9
SHA512

1c9183c405b2513cab376c5c1d8ff108184b49109d1f85a2ec1c667e811201b53c974206e7973582ec66bbe571858a472fe15b6316f59ac8d3cac225a47ec6be
SSDEEP

6144:qFm8hllbnH1C1wZmeaiW3nCg3IyTtaRQSQUjZm63LXOPXpkF:qFm8hPLHjZmLDV3ZTERQSvVm6372ZkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d5a7fc691f74c3471e6956310d7f737_JaffaCakes118

Files

2d5a7fc691f74c3471e6956310d7f737_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: 648KB - Virtual size: 648KB

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ