93b973800e174756ed5feb8d491e6e4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93b973800e174756ed5feb8d491e6e4d_JaffaCakes118
Size

94KB
MD5

93b973800e174756ed5feb8d491e6e4d
SHA1

17b6c265c0015638ddaa30335ee16acf2bc034a2
SHA256

d16a4e17993410d261c4b348838ddb87f67c0ae147b8fe44d0741539db3c0fd7
SHA512

5a5007ab05d4e6583bc40b55162f0a036210e1da4b2a9fa1a11109f5345f706b23e0d2a61883fe9850ad5e0aca3e0d52dd483f7c18eeb05c34082ec159471f9d
SSDEEP

1536:bI2ZAxN+TGLradT1YN1CJfYELOwVVp+vNnkWq/ZBCj8x0zJc1GTXzPaPHv6bx0Yk:8GLA2kyhjvd5RRWPhZEXtpxdL5Cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93b973800e174756ed5feb8d491e6e4d_JaffaCakes118

Files

93b973800e174756ed5feb8d491e6e4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1834d7b82c3e9abe1b2aa3049596bb73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ProcessIdToSessionId
CreateFileA
DefineDosDeviceW
SetConsoleTitleW
GetGeoInfoA
CreateDirectoryExA
CopyFileExA
ReadConsoleW
GetPrivateProfileSectionA
GetConsoleAliasA
EnumCalendarInfoW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE