a87d94643c475f125de13f89bf9e5974_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a87d94643c475f125de13f89bf9e5974_JaffaCakes118
Size

193KB
MD5

a87d94643c475f125de13f89bf9e5974
SHA1

9cd87f44e7429b056148063e22e2ae1ad93c9417
SHA256

6e37e98ee9b55239e0fa41b0fdd39da9bac6a7601256fb60d8116920cea81489
SHA512

feb76dea6f82e41a716cb4ee9a0838903094b9c66149ed3fe442ced213c30401a11f5fe32132cee47f580dc71e51584127273bcdd07368c997461ddd40b66707
SSDEEP

3072:ypG9lMu5put1eXKpt0QDGmMJs+eXnR7vDT0ALLyF5gx2IX3ENmMoi:5O4uyXKj0LmMJsznR7vD1qe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a87d94643c475f125de13f89bf9e5974_JaffaCakes118

Files

a87d94643c475f125de13f89bf9e5974_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf707d5d791e8ca434cfb95a6d25597e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetStartupInfoA

msvcrt

_except_handler3
__p__fmode
__set_app_type
_acmdln
__p__commode
_initterm
__getmainargs
_XcptFilter
_adjust_fdiv
__setusermatherr
log
exit

user32

FindWindowA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ