87ec7cef89d502f84842b816bc69c369_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ec7cef89d502f84842b816bc69c369_JaffaCakes118
Size

31KB
MD5

87ec7cef89d502f84842b816bc69c369
SHA1

a3d00594e0ce06ec2167a60bae99a64bcb6271bf
SHA256

2201861350c6d17f9e19fc7414218750eac1e84f10e2ffe26342672ed7dcd25d
SHA512

be01dda5fe103575eb406cb75063e635528adcd3cac032470cbc09b65e9cc9b454490e104c258d7d587bcf24343e4de419ca404de02320c104e22a6417216a18
SSDEEP

768:4du3qdUXVXc+oQOdPTTY88UCTsOTGnRO8zloMAz3:4du6GXVXc+ePTTY8RHR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ec7cef89d502f84842b816bc69c369_JaffaCakes118

Files

87ec7cef89d502f84842b816bc69c369_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9956cc60357f0c1d796990249a6c11b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
ExitThread
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateThread
Sleep
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ