87cbf194cdde42e9934089c262cf2e95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87cbf194cdde42e9934089c262cf2e95_JaffaCakes118
Size

40KB
MD5

87cbf194cdde42e9934089c262cf2e95
SHA1

48c569cffc577c0f92105ba9db68eb2a332f8d37
SHA256

d33b3a6a770ed89161af4cd44aa93d6efa6c9c0cc61a13bbb7e24dd4c39ac6ca
SHA512

e3eccd35c71fc55d3d8336ac73ff26e1ab3cf886c5432e8a6f4d518933842fb6f4c85c98ef68d659a481a80b5fec8d3db5e2a0755cc02c51cbd1976742c8f926
SSDEEP

768:QvFllA4+XvNUu7PTKyohWFzWH/N/OFP0ww0gOqPhUL1OTg:QdY42vNUK9oWFC/NGFPXw0g9P81O8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87cbf194cdde42e9934089c262cf2e95_JaffaCakes118

Files

87cbf194cdde42e9934089c262cf2e95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7f43a3ffff346c391e68f1136a2e439

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesA
FreeResource
LocalAlloc
MapViewOfFile
UnmapViewOfFile
VirtualAlloc
EnumResourceLanguagesW

msvcrt

_stricmp
fwprintf
rand
srand
time
wcscmp
wcslen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ