52666107ab45e9a86b372a7554bcf749_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52666107ab45e9a86b372a7554bcf749_JaffaCakes118
Size

393KB
MD5

52666107ab45e9a86b372a7554bcf749
SHA1

91abe938ec99dabc7fd8ac56ad056aa629b7f750
SHA256

8e4e08a8ac0bbf3f7efbfcb84d111457c1d535dc4d37665795ec52d089204f9b
SHA512

33ee36ed7081456eaf8fc6438e07483834f2b2e8a9e1168c57bbbcaddebc623111b78feabb8435019072d7a35ad577d907c64544e9158dfdd245277c663e0299
SSDEEP

12288:+XcpVWrq5x8BqpqtdSOEHPRubFYGq6G18+Pk9:arq56PrL/Yy68wU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52666107ab45e9a86b372a7554bcf749_JaffaCakes118

Files

52666107ab45e9a86b372a7554bcf749_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 100KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ