87d9ef97da1e685c852a13caa06d07fb_JaffaCakes118 | Triage

Sharing

General

Target

87d9ef97da1e685c852a13caa06d07fb_JaffaCakes118
Size

95KB
MD5

87d9ef97da1e685c852a13caa06d07fb
SHA1

96721e8bc666588b9f2b1adc01f13d566157a989
SHA256

a6ef6f6c2903431580bdd87e3aa3ee4fdd1f33b3a533a72ff735185e3d32ad9c
SHA512

ab10ed5236fa6ded2d1d595c8fbca9a552aa05bb289ecd0d87149a7f852bff438d5fe8a6007230e6b4002c5e1839c91e44f9406e60fa7337eecf9dc1cc7212ad
SSDEEP

1536:fN8k3qSADi1D5z8HqyA8vk0mRW2abvrRt5Cmxvxi2XB8fgHR29Z15zFvUprX:d1ADKD5ADMrRALk6xiVfgxWZPzFST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87d9ef97da1e685c852a13caa06d07fb_JaffaCakes118

Files

87d9ef97da1e685c852a13caa06d07fb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e76489e5e8fb04e575fc22708aea5bc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 836B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ