JaffaCakes118_d3b27d6ae37d7ec6708df648d7ceb68c | Triage

Sharing

General

Target

JaffaCakes118_d3b27d6ae37d7ec6708df648d7ceb68c
Size

375KB
MD5

d3b27d6ae37d7ec6708df648d7ceb68c
SHA1

5e312dc6a34aace9fa89945caa7528f4978bb351
SHA256

2edd4288110d5f3f05eecf30eea85ef652042bcfbe626e236ea5a85c9e606501
SHA512

fe8687a2d3fb26692e048871c359017e2f1febc9e928ab8c7ce5798b91458e51e7e62989519c7a862961289551b9a3a3103d08e829b0767ca2500cb09e78bd25
SSDEEP

6144:OjuuOcpAxHjSc2o4I/00TfP2tohqaQptp+DvBTXnFs9VOLXM53B2X5yirlCoI9A:EuuOqsebIVCChqaQvsDvN14VewA5FlCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_d3b27d6ae37d7ec6708df648d7ceb68c

Files

JaffaCakes118_d3b27d6ae37d7ec6708df648d7ceb68c
.exe windows:4 windows x86 arch:x86

9d870915cd3d95b0df885669e5e74306

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetTickCount

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 184KB

.idata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ