87c1a1f64ab85071ad64954d4df80b33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87c1a1f64ab85071ad64954d4df80b33_JaffaCakes118
Size

179KB
MD5

87c1a1f64ab85071ad64954d4df80b33
SHA1

cb7c950c5fb2f4bc462f8c87b93cd019f55a25d3
SHA256

89144257192135f6a814c7a0469af5fe74c42a33c5835b52830bdff46beeb0fa
SHA512

81cb55ad2908b5804bfa656907aabef6061a37d08492643d9b5ef5c3e3b2fa1440472b745b126333af3868b1f10e5bf115358931c855ff1f7455ef5e493d4320
SSDEEP

3072:UBZ8lWgJcEyCwJeFaSLbO/qS2VGIpyvLT/1G4bHmPPjC4oQgyi4:GZSdiCvESLbO/qSQGIwvLT/1GW74nZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87c1a1f64ab85071ad64954d4df80b33_JaffaCakes118

Files

87c1a1f64ab85071ad64954d4df80b33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69b207c6f61cb83141bc6be6e5ea19a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
lstrcpyA
HeapAlloc
lstrcpynA
lstrlenW
LoadLibraryExA
MultiByteToWideChar
FindResourceA
lstrcmpiA
FreeLibrary
EnumResourceTypesA
FindFirstFileExW
SizeofResource
LoadResource
WideCharToMultiByte
CreateFileA
GetModuleHandleA
IsDBCSLeadByte
ReadFile
InterlockedIncrement

oleacc

GetOleaccVersionInfo
CreateStdAccessibleObject

msimg32

TransparentBlt

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ