93d6e17f0565be4b570282648d02e9a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93d6e17f0565be4b570282648d02e9a5_JaffaCakes118
Size

94KB
MD5

93d6e17f0565be4b570282648d02e9a5
SHA1

32e460683336897bdeea3f9027d49f440daec939
SHA256

6e3835f4800549dfffb34143d85b6b546fc9a3406dc148d1823d8fb8002fe1a2
SHA512

f6f494805fd1be94d3be3f434f32cfa97d2a9cb02e1f95c9f2ee1596a213ddfed031a3571c5ec9a275c0acd73726cf9cebff95eba8eeafeee31f99d0c39d6fb2
SSDEEP

1536:RfbdoIXldfOiFY7aV87+ENC6cEwFfdzc8YaEJwZK4/83ZoMOALF6SSf:9+IHOibhsCrjxVhZEXtpxLF6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93d6e17f0565be4b570282648d02e9a5_JaffaCakes118

Files

93d6e17f0565be4b570282648d02e9a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6baa10255be8ba96abd47d0942a95c4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputA
GetHandleContext
LocalFree
RtlCaptureStackBackTrace
GetGeoInfoW
FindNextFileA
IsSystemResumeAutomatic
EnumSystemCodePagesA
TerminateProcess
OutputDebugStringA
ScrollConsoleScreenBufferA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE