93a1e1a4922ba7a9a0d962c889fe55f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93a1e1a4922ba7a9a0d962c889fe55f5_JaffaCakes118
Size

79KB
MD5

93a1e1a4922ba7a9a0d962c889fe55f5
SHA1

fb9b89ff297bffbad9011f67f6ba8905092c2854
SHA256

cd57daef5b001b3946d5d16aedd14bf4bb44848eebd403e3bdc4df005f528af5
SHA512

d50b6a4009b236c83ba25a69e6f5ffed1fc2a2f40a5fd4b34f8be260d001437f7b31ef2f9619e8793e95b685a16be1caf4b648602d66b0bb68a3ae71a36a531f
SSDEEP

1536:PUDLj2zHmWpMWPRYazDYZZHYtgjHTif5rdqIpRcXgHsOM28:PIj3We5azuYtgjGBrdxiXAM28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93a1e1a4922ba7a9a0d962c889fe55f5_JaffaCakes118

Files

93a1e1a4922ba7a9a0d962c889fe55f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e988e8f8338df8fb36c7c2e4ab190aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
fopen
fseek
fread
??2@YAPAXI@Z
tmpnam
fgetc
fputc
fclose
time
srand
__p__fmode
rand

kernel32

GetModuleHandleA
GetModuleFileNameA
GetTempPathA
FindFirstFileA
GetSystemDirectoryA
GetCurrentDirectoryA
SystemTimeToFileTime
CreateFileA
SetFileTime
GetFileSize
CloseHandle
Sleep
GetStartupInfoA

user32

PeekMessageA
wsprintfA
DispatchMessageA
SendMessageA
TranslateMessage

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ