87bcc8474f2cad1e0c97d0d91e15163d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87bcc8474f2cad1e0c97d0d91e15163d_JaffaCakes118
Size

7KB
MD5

87bcc8474f2cad1e0c97d0d91e15163d
SHA1

3e7f5cf2c098d2b1ab74e6eb769ca20ff9c5101a
SHA256

3b58d7af87ff942fbf8b72bbce31f0b5aac45998fd04291dfd2a5a518bca2ddf
SHA512

749c632caef83d2ef4ed76b223263312281b37203e4912bc8c563faf9137ffacfb75a5bee31f4bb28a6ab1b42357c24fb080cf80fa864a8fe1dadc3c9bd5d564
SSDEEP

192:vGoF2PXPuOfa1SV0D8vkwfuXx0donP1oynb607ldF6:NSXUU0ZquB0dw1d6Qldw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87bcc8474f2cad1e0c97d0d91e15163d_JaffaCakes118

Files

87bcc8474f2cad1e0c97d0d91e15163d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87d87a07a18d5855d835fe7dcd98a845

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
GetCurrentProcess
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
realloc
exit

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ