3fff2cfb46a1fe2d3a534f05c9fdc8e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fff2cfb46a1fe2d3a534f05c9fdc8e6_JaffaCakes118
Size

244KB
MD5

3fff2cfb46a1fe2d3a534f05c9fdc8e6
SHA1

d3a8c85c818335a355d22514b9708754561e5c5a
SHA256

623ca6c620e2124a28cf1002a8a545504683fbebcb8074017621098bc5118f5d
SHA512

92d922787876270c2f37fda00d7f0d55e2c75689af7c32b1750fccf1a5b912d05c92c9317cd2bc97d7389c0f4f06894277d75b3c8ae3ba2b49b1c1afb242a84f
SSDEEP

6144:AovZBqcrIuqI3ZC+KClVV/O9gEMDOsaBAzI8QESN9:AovZkcku/3ZCCRG6SsaBR8jSN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fff2cfb46a1fe2d3a534f05c9fdc8e6_JaffaCakes118

Files

3fff2cfb46a1fe2d3a534f05c9fdc8e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 56KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ