93d15ec8021301f6d8bf86ce6286c2ae_JaffaCakes118 | Triage

Sharing

General

Target

93d15ec8021301f6d8bf86ce6286c2ae_JaffaCakes118
Size

86KB
MD5

93d15ec8021301f6d8bf86ce6286c2ae
SHA1

6afd061784beba0a48dd8dc5fa3f7d71bbc80952
SHA256

9512944966ec45d6027cbc54f8c58a279ab8987018ae57aa54b3d6c8bcf64d1f
SHA512

b937bd7c4e9158d16f150b2c6b0d9443cf6000971b866493c0ffb5b28418e6b1a74d035edc475f7809e0a7fbe8be4a0408ee4fc13276ce27d0523afac01d8a61
SSDEEP

1536:BNUK+O2fQkSWk8mL0T0h19JbzhOMyygWetw6JbNf1BnJNP7dcf7T61s5Varlj:4G2lY8mAT8LJ/LyySDxNf1Njdw7T2cV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93d15ec8021301f6d8bf86ce6286c2ae_JaffaCakes118

Files

93d15ec8021301f6d8bf86ce6286c2ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b07cfd4c739bef4be1bd291a1b36d7ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocConsole
RegisterConsoleVDM
VirtualProtectEx
SetVolumeMountPointA
GetCurrentProcessId
RestoreLastError
SetFileValidData
DebugSetProcessKillOnExit
FindNextFileW
ChangeTimerQueueTimer
CloseConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE