JaffaCakes118_a7522dc42b76f61883564549343933a5 | Triage

Sharing

General

Target

JaffaCakes118_a7522dc42b76f61883564549343933a5
Size

226KB
MD5

a7522dc42b76f61883564549343933a5
SHA1

e88bfb65b7a1436670834958e2e034368ba1e499
SHA256

7fce756c9892c833c77140ca318cfdc5e53aac47f22e32e17a7355ac8b3c7a41
SHA512

1f42bbd6d59b6540fa0096aa83393264c8ee7c4492a971e06eb29166a6aa7397e35920f7ec55ea3f7a7f283637811922ddaf74d970858e111799e6df58ecde6b
SSDEEP

6144:UOy2YCh2Lsj520BIQzTpJw7GQwdKX5w+OGhLeUGC9UEBGMw:UOy2YUusU2JzTk7N/XWzGd5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a7522dc42b76f61883564549343933a5

Files

JaffaCakes118_a7522dc42b76f61883564549343933a5
.exe windows:4 windows x86 arch:x86

3d05135032f86cc84003861744e4f532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 80KB

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ