fd259cfefa1dd16178ef6623b8c8399b_JaffaCakes118 | Triage

Sharing

General

Target

fd259cfefa1dd16178ef6623b8c8399b_JaffaCakes118
Size

518KB
MD5

fd259cfefa1dd16178ef6623b8c8399b
SHA1

65f4e9094b8f1d9b9a843432e1c914dc1d4fe1e2
SHA256

250355658006933dcbc4c2ccd87ddcd014b3177d97050dccfecf774b114d00d4
SHA512

3260721f7b43b1141e4d778b9cbfa614e3f59265a428b04b00d22f54d8708be91f0f8b61266ba24488a65de7c59f5a337db8c7936dd80371790a8b1035972f4b
SSDEEP

12288:sFywNSoOj/RBuCXRINHGoAY984mZmk3Wmqy8uVMvS:QN+RUmRamnY984pkmhy8uqvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd259cfefa1dd16178ef6623b8c8399b_JaffaCakes118

Files

fd259cfefa1dd16178ef6623b8c8399b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 372KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ