93b9920cad7844db9f708e8a20c55168_JaffaCakes118 | Triage

Sharing

General

Target

93b9920cad7844db9f708e8a20c55168_JaffaCakes118
Size

29KB
MD5

93b9920cad7844db9f708e8a20c55168
SHA1

5668b1bd387d56cc0b29b8e081ecf9e55f37df74
SHA256

26a97fcc1cb164d3fac13475e3c46dfb7cebfd79e43afd7abc3c72e960f68ce0
SHA512

bb09c4b59def52e4eddbde47b8a674bf51b5dba7642c233d05938805c3ee77dead822423ff2edd5090d7c2d41f3f44598220359adfe1f9f235985bea0a2d14bd
SSDEEP

768:1ylxssd6gV4WDe4jDtbQ9aCHpr03PqWdlY3lRG:1ylxswZDRtkMCJ43Pqii3l8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93b9920cad7844db9f708e8a20c55168_JaffaCakes118

Files

93b9920cad7844db9f708e8a20c55168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8a01b3ee9a82e25d5281276f6885d5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcat
memset
strcpy
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
strlen
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
_initterm
calloc

kernel32

GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE