87cc11306fa0823ef90af7aa97dc43f7_JaffaCakes118 | Triage

Sharing

General

Target

87cc11306fa0823ef90af7aa97dc43f7_JaffaCakes118
Size

52KB
MD5

87cc11306fa0823ef90af7aa97dc43f7
SHA1

c9410407f5d01cf0823fbd710c54beca1be39ced
SHA256

1aaae5d8194f49ae5f0d6178ae5d64a74568dd2821e3b68c50f799a0cabfff2e
SHA512

977a6b6b94ca5f0f5ba22d10a9d34cf5049e5420f806aea8404670b8b92217fb1c45ef7ed803663cdafdc6b098146ccf0236c324862f2cd0c932efa9014078ab
SSDEEP

768:S4EZAy6a2UTXlW9k8cb1A8AHFyKGzrvApxJhHTYcfnFJeyv58n:S4e6a2aVW9k8s1SkProp5vvF8yB4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87cc11306fa0823ef90af7aa97dc43f7_JaffaCakes118

Files

87cc11306fa0823ef90af7aa97dc43f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4c10bef49b8632d134bbc897ddb53eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
VirtualAlloc
lstrcatA
lstrcpynA
lstrcpyA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ