87e5e22f88017d1c7942f9a7e6aa4245_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87e5e22f88017d1c7942f9a7e6aa4245_JaffaCakes118
Size

814KB
MD5

87e5e22f88017d1c7942f9a7e6aa4245
SHA1

559e364538ba86508b95bfd7c22ea7340f70cffb
SHA256

21f7514432fb418320495cf21396c7e32a230b8ae33b92b3079f87b6a4dc0e5f
SHA512

85a67f647b23a3c5a49e22a60ae1184822f6fe0645eece9ef10ac08586eee051118305411136878c8472af2e7fad31076f9d3e43c43335d3960f8dae97fb69d6
SSDEEP

12288:/UqzPKm/7gXPaiVxu9uQWxRLxQBchHFLs2i+yu3GY9CRVdmRaxTUp4eih89TkG9B:TzPKz/VU9Bm1eWXWYfExuJIGrXwGa20A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e5e22f88017d1c7942f9a7e6aa4245_JaffaCakes118

Files

87e5e22f88017d1c7942f9a7e6aa4245_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef8d85169936d5bb26c6f1522f27e6ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
LocalFree
CreateFileMappingA
GetACP
LoadLibraryExW
GlobalUnlock
FreeEnvironmentStringsA
GetConsoleCP
TlsGetValue
ExitProcess
LocalLock
CreateFileA
FindClose
FindAtomA
HeapCreate
GetModuleHandleA
CloseHandle
Sleep
GetConsoleAliasW
GetLastError

user32

CopyRect
GetDC
CallWindowProcA
GetFocus
FillRect
GetIconInfo
DrawFrame
DrawEdge
DispatchMessageA
IsWindow
GetDlgItem
CheckRadioButton
DefWindowProcW
MessageBoxA

clbcatq

InprocServer32FromString
GetCatalogObject
SetSetupSave
GetComputerObject
SetSetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ