43d2e4aa6fa48e6ecad38ff2f2086e0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43d2e4aa6fa48e6ecad38ff2f2086e0f_JaffaCakes118
Size

16KB
MD5

43d2e4aa6fa48e6ecad38ff2f2086e0f
SHA1

a94bea1d5b8e9254317ebb6f1ff0fd8f8240eb7c
SHA256

73dd8c266d2baf7717104c651dfa314ffb68f48b1c00e48a2c00c35f198625d7
SHA512

8f9c3a65865eeeaa62a8f20854c054d06896766a8d98c58a99bfd34543a05263964baa12a3126b838442383afcf7149de43e8d3873323cd2457089b1c0c540af
SSDEEP

384:mjcHoOOHu0AeKSbMwh+iiRqT+oZfrHxAglja4kgWCIG5pMHoVSIK:LIOOXK2Bh+iiRqDZTRAgta4kg/LMHosT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43d2e4aa6fa48e6ecad38ff2f2086e0f_JaffaCakes118

Files

43d2e4aa6fa48e6ecad38ff2f2086e0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\XRoot_Build\X5.2\Vm\release\StubExe.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ