93ec999f6c60ec676d4da0affcc41bbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93ec999f6c60ec676d4da0affcc41bbe_JaffaCakes118
Size

111KB
MD5

93ec999f6c60ec676d4da0affcc41bbe
SHA1

66c5fd77d2c803a712c99b3275ad5372032a757c
SHA256

14e82d16bd6f3390206b6f35771783f16e02b3f989e88550746af2e89158a4ea
SHA512

0bd4a104202399eae7a2f422abf61d50af7391b7cf00a7ceb9d02a45d2272bef29457b8465afd926b57970040bdfe41dc3e01d97e2499302a189d23d3089b00e
SSDEEP

1536:3rD679bBLGG2UwifjK1q3BhNL782aLpFtVltN2jHCu9jJM6wWO:3voltwi7GEBhN3kLpFtqiuzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93ec999f6c60ec676d4da0affcc41bbe_JaffaCakes118

Files

93ec999f6c60ec676d4da0affcc41bbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af4be167e6dcc7d696fd174e72baacad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetTempPathA
lstrcatA
GetStartupInfoA
CloseHandle
WriteFile
CreateFileA
lstrlenA
GetSystemDirectoryA
lstrcpyA
GetModuleHandleA
GetProcAddress
GetVersionExA
CreateRemoteThread
LoadLibraryA
GetModuleFileNameA
ExitProcess
WinExec
GetCommandLineA

user32

CharUpperA
wsprintfA

shell32

ShellExecuteExA

ole32

CoInitialize

msvcrt

memcpy
??2@YAPAXI@Z
strrchr
strcpy
strncat
strstr
free
_except_handler3
_exit
_XcptFilter
_controlfp
exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__CxxFrameHandler
_acmdln
memset
strlen

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE