87d3712767d6990ca0459a0b4ee77e4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87d3712767d6990ca0459a0b4ee77e4c_JaffaCakes118
Size

812KB
MD5

87d3712767d6990ca0459a0b4ee77e4c
SHA1

10999013e228c1692e915a64cf2a6c88b4ad9d0f
SHA256

10db645ca0383deb02c915b9428d7f19feebbed5bb7a487d64a99f460b4aacd9
SHA512

5d65d30c5769e9ae1faa071829cdc72d28951638e6ef763b9f12ff4288c6e0af263ce87d5af1c97c3dcdf4ac938ed0216d0d45ac9a8dc165ecdfe7eb36ca991a
SSDEEP

12288:3BEjt6hsxaf11lAaywjFwk1i7/ugGNPWUKAmYbYaRhiC6RPytav:xEjtFxaf11lACFluEmYbYaCCMPyk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87d3712767d6990ca0459a0b4ee77e4c_JaffaCakes118

Files

87d3712767d6990ca0459a0b4ee77e4c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

769a1cf410739128befc1ccb1370e265

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetPrivateProfileIntW
GetTickCount
GetShortPathNameW
HeapCreate
CreateMutexW
GetStringTypeA
SetEnvironmentVariableA
GetCurrentProcess
EnterCriticalSection
FoldStringA
SetVolumeLabelA
SetCurrentDirectoryA
LoadLibraryA
LeaveCriticalSection
GetVolumePathNameW
DeleteFileA
GetConsoleTitleA
SetStdHandle

aaclient

OpenKeyReaderWriter
LoadClientAdapter
g_fnStartTransport
OpenKeyReader

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ