93c98cfc407afe3c3b3cd557643a160e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93c98cfc407afe3c3b3cd557643a160e_JaffaCakes118
Size

78KB
MD5

93c98cfc407afe3c3b3cd557643a160e
SHA1

fbca31e452e693c1ac01b04105a184e5755fd0ec
SHA256

5a06d7ca8e39b39291e9eb2203283080dbe8d5a6eb1956288e6a2963e19a24c5
SHA512

68357587c36be850cc8db176a7010cfe02807ca7851e3a83f9ad3f3d2a2e31fee48f32568e7fb05062151f6b7c040629a3d62a13f21d6bee114aa66b9965ed41
SSDEEP

1536:PmkgRjKOPM82q2qstg4QeV/EVWUXLNjUYphlp:PmV3Pz2fgneV8tXp9jD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93c98cfc407afe3c3b3cd557643a160e_JaffaCakes118

Files

93c98cfc407afe3c3b3cd557643a160e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3b5ba0c1a026aa9aca8bc16267d62ad0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetTickCount
GetProcAddress
VirtualProtect
IsBadReadPtr
lstrcmpiA
LoadLibraryA
VirtualAlloc
GetModuleHandleA
CreateThread

user32

LoadIconA
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassExA
LoadCursorA
DefWindowProcA
SetTimer
KillTimer

Exports

Exports

sfgsdfsdfs
sfsdfsfsdf
start

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 687B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ