093f90c6121f6b6ed26329b465199400_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

093f90c6121f6b6ed26329b465199400_JaffaCakes118
Size

355KB
MD5

093f90c6121f6b6ed26329b465199400
SHA1

03368f211f948b61e82859254e9e0a7ab06b1ad5
SHA256

ad00b40f4653e8e72183168e3c170c3aa0d642a1ed86ca3fe617ae5e9842818d
SHA512

c44d28aaddfa4f37c75aa20de74cca2b1e63aebd115fbdca6d46fb11317656785b7e414530f35172d8e38a4d27a1d0bf4966d02d9217fc487ff47020952e391a
SSDEEP

6144:B/U1qQAqzUeZhm+bceu5z2pb+OmSbGqJH:9cfmsWrOmS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
093f90c6121f6b6ed26329b465199400_JaffaCakes118

Files

093f90c6121f6b6ed26329b465199400_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b128f0beb9864f768ef00584e30ba9e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetCurrentThread
GetOEMCP

user32

LoadCursorA

advapi32

RegOpenKeyA

Sections

.text
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text3
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ