1a93b979f37b0a453d8f5d34b9f5b138_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a93b979f37b0a453d8f5d34b9f5b138_JaffaCakes118
Size

114KB
MD5

1a93b979f37b0a453d8f5d34b9f5b138
SHA1

c5a6eb6ca5a4154cc947ffb499eda2b41b2adf15
SHA256

91826a33dac1d9e7080ae6da920d2d8b66c8298c8a154d78c808f5eab7e42c5b
SHA512

90e731899d3c93e88ee1bc851bd9a13c8378bb0636187d48bafc45a84d5d1ef24ceb37c6bdf6468ec1ba4c48af3bb0dbe4975a9e473608a5cf663e867cec1f37
SSDEEP

1536:ys4aeELrFYPC500UmCzb4jO6foO/IvO7j57GqxvjAkDHmIslqlk3GWD100tGMRf7:yslFYPEXUjzb8Oa1RRDHEqSZp0e53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a93b979f37b0a453d8f5d34b9f5b138_JaffaCakes118

Files

1a93b979f37b0a453d8f5d34b9f5b138_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59ec134a8b484a33e45814aa20c7a2a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
HeapDestroy
FindNextVolumeW
MultiByteToWideChar
QueueUserWorkItem
GetVolumeInformationW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE