86fb9063b2712cbc14e5397b8f32e816_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86fb9063b2712cbc14e5397b8f32e816_JaffaCakes118
Size

81KB
MD5

86fb9063b2712cbc14e5397b8f32e816
SHA1

94c8425d0e54a34726e5c09fc608e9eaa11e38f5
SHA256

61fca494111200042c7e90a0bb3bc0cc5f9cdac5098cead8a0b70188da713c56
SHA512

05161bcebe2bde616bb4bdbcd7408a2daa38e090b3d5be2ca386c3c644030d56cf2835bb63ae602766fbb1a40903094e9e663f9bb6748df52243cb26a00c81ee
SSDEEP

1536:wSEZb8kErz+WpEOx5pvUjzJ2RT5EL6E3ea/rr81UTkfWy92ul:wSEB8kQCWxDR5EL6kaykOmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86fb9063b2712cbc14e5397b8f32e816_JaffaCakes118

Files

86fb9063b2712cbc14e5397b8f32e816_JaffaCakes118
.dll windows:4 windows x86 arch:x86

42fb9692a824e417416408cd022b278d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindAtomA
GetModuleHandleA
GetProcAddress

user32

GetDesktopWindow

advapi32

RegQueryValueA

Exports

Exports

tgcmuxbya
vsvnxptrv

Sections

.text
Size: 1024B - Virtual size: 731B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 365B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ