93d38e67661a4721e9d05967947516f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93d38e67661a4721e9d05967947516f5_JaffaCakes118
Size

115KB
MD5

93d38e67661a4721e9d05967947516f5
SHA1

9ab5939fc1710ca23821045849506767831f667e
SHA256

d9915157b0daed668589f30ff5ba9dce17321a17012a14e210694424d021b86b
SHA512

495b59e60e144699751a8004d072f6dc3e6b57b54160993451705b682ed6f53fea6de1e10cb2f76ee098864fa36af6341c486c6943d3b4f1468091edf7ae0b6f
SSDEEP

1536:iIdmE3x4+8D6i0ejhUg/tWTCQC+2k0W5a45JfHDO9XolMK6tv+RWBH/KxXlfExao:zDejf/uEDQ5jHDKXNNv+4H/AfYZ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93d38e67661a4721e9d05967947516f5_JaffaCakes118

Files

93d38e67661a4721e9d05967947516f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

538d747291fdb438d068756f3c2e3646

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
FindFirstChangeNotificationA
HeapWalk
EnterCriticalSection
SetHandleCount
InterlockedExchange
WriteFile
OpenFileMappingA
WaitNamedPipeW
CreateDirectoryExW
VirtualProtect
EnumSystemCodePagesA
GetBinaryTypeA
GetConsoleNlsMode
GlobalDeleteAtom
IsSystemResumeAutomatic
GetVDMCurrentDirectories
ReadConsoleOutputCharacterA
CancelTimerQueueTimer
BackupWrite
SetThreadLocale
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE