86454a6f696c43f82d08be37b011c391_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86454a6f696c43f82d08be37b011c391_JaffaCakes118
Size

2.0MB
MD5

86454a6f696c43f82d08be37b011c391
SHA1

21bcb70effe0aef82cdbb9fa203b54deea45fce7
SHA256

976e6a3959ae05bdd1a37c36f9ba88a2597b2a7e16f348932c5bc0ef3ea9b87b
SHA512

43ed7afef07b208a2dbbc901f466ce47680a1d34a6b0fd7d1f0a0c157f0e56c58174a31ed1901d9579730c0fa359d397498a23928f5c9e5e4560ad53f0b5da3c
SSDEEP

24576:b7vt5555555555555555555555555555555555555555K:fc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86454a6f696c43f82d08be37b011c391_JaffaCakes118

Files

86454a6f696c43f82d08be37b011c391_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7f59364d54ef6f04deee30324e9b8cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
CompareStringA
GetProcAddress
GetTickCount
LoadLibraryA

user32

DispatchMessageA
GetMessageA
TranslateMessage

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ