93f484d06a87f64fe2a5bbe720f0bed2_JaffaCakes118 | Triage

Sharing

General

Target

93f484d06a87f64fe2a5bbe720f0bed2_JaffaCakes118
Size

144KB
MD5

93f484d06a87f64fe2a5bbe720f0bed2
SHA1

318b1d70da3ea8a8e5c83982798bf935ead64be9
SHA256

612ae80a8f73d4aaebb5791b7176fd04645e913e4af06a99b74a65294efa3745
SHA512

ec0d18f04071822207dc6bdc788e4d6947c14795635cded70c149ed6f3bf9a81ce754d33821ef058862dea8497ab927a2ebcd10bd1484efcf34d9842cff5834e
SSDEEP

3072:iBMvzevo6jEHoIrnp/zzrTJ0iaeeDrQ1C4aaStc+1p:kMiw6HSBHrqYCvW+1p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93f484d06a87f64fe2a5bbe720f0bed2_JaffaCakes118

Files

93f484d06a87f64fe2a5bbe720f0bed2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

263f2c74198635066e799ddd460d8fcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
CreateDirectoryA
lstrcmpA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gentee
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ