87b6dae9e004c002e8fff562b7b84b4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87b6dae9e004c002e8fff562b7b84b4e_JaffaCakes118
Size

135KB
MD5

87b6dae9e004c002e8fff562b7b84b4e
SHA1

9c453dc7a5422fe077b6dac5ad71f06801bd3bbe
SHA256

a4ae10ebe2e5c511267c107fe75b9358102d059cb871e00c43eb3e18b57a8f41
SHA512

46a617c25993252318d3c18d54ce1db5dc5f3c327c8387c6f7e319357a68e95feab4411db5611ca088aac2ba5224f006fbd02385b3776b1a0929ec9a23d971e5
SSDEEP

3072:ph/p7O875DQ8GZaRBJFKZekfhqLKqLIhz9HwrAUqlOUFB:t77DbGEpFKZDqTa9HwrqlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87b6dae9e004c002e8fff562b7b84b4e_JaffaCakes118

Files

87b6dae9e004c002e8fff562b7b84b4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a99a677553423f13ff413aaca92b122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetVersionExA
HeapSize
IsDebuggerPresent
LoadLibraryA
OutputDebugStringA
TlsGetValue
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile

gdi32

DeleteObject
GetDCOrgEx
MaskBlt
PatBlt
SetEnhMetaFileBits
SetROP2

shell32

SHBrowseForFolder
SHBrowseForFolderA
SHFileOperationW
SHGetDesktopFolder
SHGetSpecialFolderPathA
ShellExecuteExA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ