JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a | Triage

Sharing

General

Target

JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a
Size

158KB
MD5

87e8d91f41bdf424ede7d2d0139d7f9a
SHA1

549490ff753f5f8aaab5a57fd143d8e9b32aee9b
SHA256

738525e6f38822a0466ea9859c368d2625ff598e870db0cd41499eafe19519cb
SHA512

ab6859473afc86a46b07f0a8301e7697d67de3272627543bbf0d7bf35fe768524d48c6ca6eb9be706e748e1fb03bbb6975f7605a2f78530e7b45bc0c30aec929
SSDEEP

3072:qnvTqkBbgv/inBu6XIX88vTglZTvY6CB6SmIvbp99:qnrBJAVX88bgTTw6CcvIvbp9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a

Files

JaffaCakes118_87e8d91f41bdf424ede7d2d0139d7f9a
.exe windows:5 windows x86 arch:x86

938b330676ac86ff135940b90f71ec3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualAlloc
GetLastError
VirtualFree
GetModuleFileNameW
FindFirstFileW
FindClose
CreateFileW
SetFileTime
CloseHandle
WriteFile
CreateProcessW
WaitForSingleObject
ExpandEnvironmentStringsW
CreateDirectoryW
SetFileAttributesW
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent

user32

wsprintfW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ