93e86b817b8c3abb9da132d915fd4df0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93e86b817b8c3abb9da132d915fd4df0_JaffaCakes118
Size

283KB
MD5

93e86b817b8c3abb9da132d915fd4df0
SHA1

2fb2cbf4b9e8351670ca9a6ef993827dc44390ca
SHA256

ba4cf3ebe8ed547411e8ddf24a8cfed4570a36b3d7143319a2dc723237161b77
SHA512

9da46ff8e0049065748d0ce93baf6cf9e6ae0af90664e457a523fd5e3750ad0ee39ca8a89303f9c5392c50ab1c52d904bec0459e039e890ee0f27c92f9da76d8
SSDEEP

6144:f1Y9Kvr0nCBs1Oakyn3vRhWCi6TcWzZyQ9Nc9:f1OnCBs1fpn3vRhWC5TPzNM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93e86b817b8c3abb9da132d915fd4df0_JaffaCakes118

Files

93e86b817b8c3abb9da132d915fd4df0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b25e0cc621711312d7e20b783f4ba6f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
TlsGetValue
GetTimeFormatA
HeapReAlloc
GetCPInfo
MultiByteToWideChar
RtlUnwind
TlsSetValue
HeapSize
GetLocaleInfoA
SetFilePointer
TlsAlloc
GetOEMCP
EnumResourceNamesA
GetACP
IsValidCodePage
GetModuleHandleW
GetDateFormatA
WriteConsoleA
SetStdHandle
GetConsoleOutputCP
VirtualAlloc
RaiseException

occache

FindControlClose

shell32

SHGetFolderLocation
SHGetSpecialFolderLocation
ShellExecuteW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
DragAcceptFiles
SHGetFileInfoW
ShellExecuteExW
SHBrowseForFolderW
Shell_NotifyIconW

Sections

.text
Size: 128KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ