87c2087c6d6b56c344f1f4d81ba0621e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87c2087c6d6b56c344f1f4d81ba0621e_JaffaCakes118
Size

21KB
MD5

87c2087c6d6b56c344f1f4d81ba0621e
SHA1

f1582ef0109e55e735c0f8d54853b7714a53fc56
SHA256

48eff2e9dadc13d1c409631daa1965b3012758ff6a568aa3cdb0735588ba37c8
SHA512

44d79b1d2dc7895d75f9c0c12e923b7b77ae655b9141c13f3ee0929ef5a89944c32ea350e8811b05a53defaeb543933ac545d9424719fb5c5bb35eae16c938dc
SSDEEP

384:KHFASbsYAwLn27MNeLNek+vDtCf0BZvmmlAddKzkOA+RIo2ReE:KlASbsGLn2ECMSmeduhburRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87c2087c6d6b56c344f1f4d81ba0621e_JaffaCakes118

Files

87c2087c6d6b56c344f1f4d81ba0621e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b32af7450be60ff1436439adca14578c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
AddAtomA
GetTickCount
HeapDestroy
GetLastError
FindVolumeClose
SearchPathA
FindResourceExA
TlsGetValue
SetEvent
GetModuleHandleA
VirtualProtect
ReleaseMutex
lstrlenA
GetConsoleFontSize
CloseHandle
Sleep
CreateThread
DeleteCriticalSection
ExitProcess

user32

CreateMenu
DragDetect
CopyIcon
GetScrollBarInfo
CloseWindow
EndDialog
EnableWindow
DialogBoxParamA
IsIconic
DispatchMessageA
GetMessageA
CreateWindowExA
GetKeyState
CopyImage

hlink

HlinkNavigate
HlinkClone
HlinkIsShortcut
HlinkTranslateURL
HlinkResolveShortcut

shell32

DragQueryFileA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ