93e53f36158cee1150ceac2d60675275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93e53f36158cee1150ceac2d60675275_JaffaCakes118
Size

8KB
MD5

93e53f36158cee1150ceac2d60675275
SHA1

7aaad2afe5ede4316b9eccabce186fff60b5818e
SHA256

104e0384cae73fa5b945046fe8a0398c0931edffabb3dc1ecbfeb9dc39c7f019
SHA512

1af8a553e48d94bc816393221c6d511f11e77ff7906bf89c7a6484e75170d4e6e1d3a28797e731f38d7fbb2468b8a88c9d32968d2e6f3b1f5598a50c50baad42
SSDEEP

48:OEP6Zig32JsQM7mFuOgMO+FZPduvyoBH+hAMACi:nP6ZeJfM7md+ePwfcJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93e53f36158cee1150ceac2d60675275_JaffaCakes118

Files

93e53f36158cee1150ceac2d60675275_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b2ce34067c0da332c98f4355eebf8d5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
CopyFileA
ExitProcess
FindFirstFileA
FindNextFileA
GetCommandLineA
DeleteFileA
GetSystemTime
GetWindowsDirectoryA
MoveFileA
RemoveDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
WriteFile
WritePrivateProfileStringA
lstrcat
lstrcpyA
GetCurrentDirectoryA

user32

MessageBoxA

Sections

CODE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ