c87c06968e806b8aba48c473a3ca2509_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c87c06968e806b8aba48c473a3ca2509_JaffaCakes118
Size

110KB
MD5

c87c06968e806b8aba48c473a3ca2509
SHA1

de2ef9aa2cddfb27853bb8b5dd97083cbd228e60
SHA256

ae506f828347c5dd621175b6dfea2eca6ed7e1122488e61cec1e4b8d0c40a917
SHA512

4059690a8ad399a8754def4b241e918a6a634eba8c506e6267d10dddc80f1fab17107e5fd3d4447632246b7a25bee817b6ddf587898f39052dc6daddc61983f3
SSDEEP

1536:fkeogrvBMk/XXuRgSmfA1M5ne8PUIwk0S9c/gRXWyQCcgC2K/qSYIZXPeKIZqdKf:scvhPXPSmfF5n937XfQsC2KmEXB0qd0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c87c06968e806b8aba48c473a3ca2509_JaffaCakes118

Files

c87c06968e806b8aba48c473a3ca2509_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2883a26b9095343792f6912013a502c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
GetVersion
lstrcatA
lstrcpyA
lstrlenA

user32

AppendMenuA
CheckMenuItem
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyMenu
DispatchMessageA
FindWindowA
GetCursorPos
GetMessageA
GetSystemMetrics
IsWindow
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassA
SetForegroundWindow
SetMenuDefaultItem
TrackPopupMenuEx

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

shell32

ShellExecuteA
Shell_NotifyIconA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ