94498afb96b771173e4a922692cc8590_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94498afb96b771173e4a922692cc8590_JaffaCakes118
Size

83KB
MD5

94498afb96b771173e4a922692cc8590
SHA1

099a154cc1a2f0c3b0dfe0629b3dd87b8525dfa1
SHA256

99f92e136eb78a25b1343bed1c7d2ab9645417913954a9abaaf79f59d09a5c14
SHA512

24b232e8ce3c832f610a6044354badc0536934aadf05c4ef7ecf628dcf8352f0c6d0e3b540dc89ba1a449330abfa5216017e9d580291aec834fc03210c753316
SSDEEP

1536:Q11119jzwhZzIwo3K8/cPT8ltW4F6JnQDoe6SUsLvnkjEErxTWDTMqhGKYIZTETr:GSzB2H/AT8ln6JQ8pULvnkjBkMqhGKZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94498afb96b771173e4a922692cc8590_JaffaCakes118

Files

94498afb96b771173e4a922692cc8590_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5e931d902ad85a5b30809087525d285

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
GetSystemTimeAsFileTime
FindFirstVolumeW
EnumerateLocalComputerNamesA
TryEnterCriticalSection
ReplaceFile
CommConfigDialogW
WriteProcessMemory
VirtualAlloc
FreeEnvironmentStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE