93e1cf27008d590612158abe8d143564_JaffaCakes118 | Triage

Sharing

General

Target

93e1cf27008d590612158abe8d143564_JaffaCakes118
Size

142KB
MD5

93e1cf27008d590612158abe8d143564
SHA1

f2c102a6c8063383729ffeffeb145ba4c5b55e75
SHA256

c6feba2647db2fb8c91b1d6de887b8709fbd45be341ea8c20a1d6d252ccfc921
SHA512

e2e71d477a45a10ca0e9ebe46b153c5929f94afcdbd86bc33f7493ad5894ea87812497b0e571e2d08d78dad3b32a0abd6b98c49eee6c8a1289e0eb3d243399a8
SSDEEP

3072:gAinTaM5CbJ8RWtfryp45hEKUlHAGvM+:+P81a/kBiDM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93e1cf27008d590612158abe8d143564_JaffaCakes118

Files

93e1cf27008d590612158abe8d143564_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2cb5b7e29a68e6e516f61ea2e5c86f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingA
GetCurrentActCtx
VirtualAllocEx
CreateFileMappingA
UnmapViewOfFile
GetDriveTypeA

user32

EnumThreadWindows
LoadCursorFromFileW
BringWindowToTop

tapi32

lineMonitorMedia

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ