93d580ffe5165dad8fb8df1cd57a2125_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93d580ffe5165dad8fb8df1cd57a2125_JaffaCakes118
Size

220KB
MD5

93d580ffe5165dad8fb8df1cd57a2125
SHA1

2412e1102c1e0bdfd60903076edcf0186de6c5be
SHA256

3b679570d9c7445ee74e82320c036e5b3847590b91f701ea5fd1a79d68c1f284
SHA512

2138e63c01cafe313f4d483d8b0428413b6d612586bd7c5ccaac619b3106c1f5b8e7a36fd708bcd83f717d865fc4a06a5a7512f80055ebf68debb2f18d17d2f0
SSDEEP

6144:Q6ZvjVrsfx4RcrgTSBj3Y5IzOO9hIv0BRp:fZRQORcrgGBTFBRp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93d580ffe5165dad8fb8df1cd57a2125_JaffaCakes118

Files

93d580ffe5165dad8fb8df1cd57a2125_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fef0ea3560698814099369d9b99d922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeResource
SetEnvironmentVariableW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
QueryPerformanceCounter

user32

CreateAcceleratorTableA
DestroyCursor

gdi32

DeleteObject

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wylzgrb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE