9073e7aa043a6a7fa82bd467992b789b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9073e7aa043a6a7fa82bd467992b789b_JaffaCakes118
Size

810KB
MD5

9073e7aa043a6a7fa82bd467992b789b
SHA1

bfc41dc81287cf569cbbc6f519ddbf7b9b352c94
SHA256

79ab649968016c63583191b08b84eba763ffd3f2ef7500095e6aa3f95bd54b67
SHA512

685e5f63f6b40d1c7c8f8c0f2cd7b15d36db1a5b8a5ccdf72c912a564c742bf4a45620963ddef0c0d5a9215e427391f2edb8e76233695ef8617252b5c67b387c
SSDEEP

12288:yy1bpGQNOHZpk0IRV1gNZmSiBKubAfDDx+28bqaAeIdt5NcrgPrFd2yWNGgZoikh:NvYHFIv1gNZ/EHbAfMxOeuPCad2xoik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9073e7aa043a6a7fa82bd467992b789b_JaffaCakes118

Files

9073e7aa043a6a7fa82bd467992b789b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b720fa207c94c590d2c4e519b5bf8360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetLastError
IsBadStringPtrA
GetLastError
GetLastError
MoveFileW
VirtualProtectEx
GetLastError
GetLastError
GetLogicalDriveStringsA
GetFullPathNameA
GetLastError
GetLastError
CreateSemaphoreA
GetModuleHandleA
lstrcpyA
LoadLibraryExW

printui

bPrinterSetup
bFolderRefresh
vQueueCreate
vDocumentDefaults

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 801KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE