93bb476b3f02ed39aa22b3d03eec5612_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93bb476b3f02ed39aa22b3d03eec5612_JaffaCakes118
Size

63KB
MD5

93bb476b3f02ed39aa22b3d03eec5612
SHA1

658bab1ca4c9ae001b8ee71119fd31c05f2196e7
SHA256

6f21466bd488eaad8963c9b6a0675bd9fa242e79fb82c08cc352c7a3b4b81749
SHA512

9f843a991d4eef631bb8d8d134d08be60ebda2bbe7ccbb824bacdad50443d9eb55b97d9feed5e83059211c97b7d92662d72ebc371ec5fcedb618b18d49115eb2
SSDEEP

1536:w45aw1HaJZp33DsjQ1X4j9M728xKPIkhcEXHiRbP:w4gw4bp33DsjQ1XsMoIkhFCR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93bb476b3f02ed39aa22b3d03eec5612_JaffaCakes118

Files

93bb476b3f02ed39aa22b3d03eec5612_JaffaCakes118
.exe windows:4 windows x86 arch:x86

69966e16e988c65185c2f6b4c9ab32a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lclose
EnumTimeFormatsW
GetExitCodeThread
EnumResourceLanguagesW
GetProcessShutdownParameters
CopyFileW
DeleteVolumeMountPointA
FindActCtxSectionGuid
LoadLibraryExA
GetCommProperties
RegisterWowExec

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE