87aeb688904ad5b7c3b31a2f8131b33b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87aeb688904ad5b7c3b31a2f8131b33b_JaffaCakes118
Size

242KB
MD5

87aeb688904ad5b7c3b31a2f8131b33b
SHA1

1b753d087f21f2e087b3bfcba7e0560259dc2b80
SHA256

45d526b937c82c5909c9ad1369e00ab4d995c93434dcc3a674b58aba4105ad22
SHA512

25b89af7d7a0194164b31face5698e4c1c301b1b79944b4ed297fb6d97666b751ba0caa5390dbc51ea00fa9d72943e29623e00c5c7d87b85b1809e321584543e
SSDEEP

3072:8Oe1+Z8MBpkbfsblBxIQRDiIdm7exvUrgJ+nW/PZV/KeL99ZL3aHgHbqRKT/JkTb:W1AnzblBp5jovwPPJ9MHiMe/JkGwLRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87aeb688904ad5b7c3b31a2f8131b33b_JaffaCakes118

Files

87aeb688904ad5b7c3b31a2f8131b33b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf10fdbdbcd4534eb67e983779ae8872

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreateEx

shlwapi

wnsprintfA

kernel32

GetLongPathNameA
GetExitCodeThread
LeaveCriticalSection
FindFirstChangeNotificationA
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA

oleaut32

CreateErrorInfo
GetRecordInfoFromTypeInfo
VarI2FromDec
VariantInit
SysFreeString

Sections

.text
Size: 116KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ