87fbd0450f5a1ff3892e7a8b7d257c92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87fbd0450f5a1ff3892e7a8b7d257c92_JaffaCakes118
Size

8KB
MD5

87fbd0450f5a1ff3892e7a8b7d257c92
SHA1

b7b407274908e9a9e937d14eb4949506f7569c86
SHA256

75861ac03965bb925c7cb472da555123cadb0c1cee995d0c32d5e7f04b4d0db4
SHA512

bf60986c4ec392868b52a8adea0b65ff00ebfb7d98b5cd7e1bb100b8d14f7a87df4bb3f1a7cb3937be9a3da56f454c89036714670c8f85439d2475f277856ac0
SSDEEP

48:yNW+JZC+4P8V7gj3vAC10IBlckUuOujq2Epu8metqPrIXHimU7yxvVK666xnc1LK:wYEC3fjOujOUpACaHxc1L8nm3c5szOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87fbd0450f5a1ff3892e7a8b7d257c92_JaffaCakes118

Files

87fbd0450f5a1ff3892e7a8b7d257c92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f469e28d762c4b75f504f50b355e952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

ExitProcess
lstrcpyA
lstrcatA
WriteFile
SizeofResource
RtlZeroMemory
LockResource
LoadResource
GetTickCount
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
CreateFileA
FindResourceA
GetCurrentDirectoryA

Sections

.text
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE