87c64ec5c9cff3f60a4855b76f583be9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87c64ec5c9cff3f60a4855b76f583be9_JaffaCakes118
Size

144KB
MD5

87c64ec5c9cff3f60a4855b76f583be9
SHA1

3d1b9b1e5d70bc69368dfa2313dfe3973b67595a
SHA256

21f5390c92cdbe793d345f5f9e08eb6b994e59136f2260d124724606d4daf776
SHA512

9a7fb36b90f0413afe63429452bb1b4ca37e580e9e22d97f45c2a7e43e9700f8326714f6673bc5aaed98d54779263877b1b7406068f383ab8014be61651f0edd
SSDEEP

3072:fX+U5PWsqAh6vDN4qTsjp0FfEsOk9dPS7NICi5bPeLkJaOXb4h2gO:fz53h6vDNJTsjp0Fsvk9dsNVi5b/JV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87c64ec5c9cff3f60a4855b76f583be9_JaffaCakes118

Files

87c64ec5c9cff3f60a4855b76f583be9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46fb1aba393e1446a0ef4c5915612208

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
VirtualFree
GetProcAddress
AddAtomA
GetModuleHandleA
VirtualAlloc
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ