86e47c93c190307aa0cd49ecc66b2f34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86e47c93c190307aa0cd49ecc66b2f34_JaffaCakes118
Size

31KB
MD5

86e47c93c190307aa0cd49ecc66b2f34
SHA1

0539b62e2a320ff88b57a326563f2347c8d11810
SHA256

d89b369364f6cd7c309b38fe26a464dfb3155892d6cc65dfbbd15e2634ff6673
SHA512

76d27d672cd61e3ac86713ac41d7d7b401fb5a79e3db2793ce1ba0c80a3451aa30ffe4e5de45ef876273583b3c9eaf9c8dabfc4a23115ee44371bc23e98f8ffe
SSDEEP

768:IH3AJkjxG12XDDT2Qg82Sendb28xqzf3:Kjxk2Xfs3SHL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86e47c93c190307aa0cd49ecc66b2f34_JaffaCakes118

Files

86e47c93c190307aa0cd49ecc66b2f34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76ad44d6d67d3d82e55350e3f753add3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetCurrentThread
GetStringTypeA
IsBadCodePtr
CloseHandle
LocalHandle

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE