72dc0a73da3cb52a6f90f14acbe140ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72dc0a73da3cb52a6f90f14acbe140ca_JaffaCakes118
Size

171KB
MD5

72dc0a73da3cb52a6f90f14acbe140ca
SHA1

03a7d7ade4506485579206169f08ceb8dee21567
SHA256

4825a057145d37a31fdba3bbe18ff9b42e8f52ee5032ae6bd36b7ac37db8cb7e
SHA512

d7c37e6cbd9a54c68751de463edeea4b724336fce4607477429bf787620142fb9c5e34b24c19dd90133800f89101f1a247ba88d40a3cb4b5b6b5008d91169534
SSDEEP

3072:TM5yoY2lRMIbFacRmm9sf/J70L9GIP9qVTJeB+5hOhfr/k7ACzi4:LoYa2/cRvq70BGIPuTU05hOhfrqA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72dc0a73da3cb52a6f90f14acbe140ca_JaffaCakes118

Files

72dc0a73da3cb52a6f90f14acbe140ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d735e32974b302c2d6d11499174c6cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
AddAtomW
GetConsoleMode
GetLastError
ExitProcess
HeapFree
GetModuleHandleA
GetTempPathW
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
HeapAlloc
TlsFree
InterlockedDecrement
FlushFileBuffers
EnumResourceNamesA
CreateFileW
GetConsoleCP
GetVersionExW
WriteConsoleW
TlsAlloc
GetModuleHandleW
GetEnvironmentVariableW
VerLanguageNameA
GetProcessHeap
GetProcAddress
InterlockedIncrement
GetVersionExA
CreateFileA
LoadLibraryExW
TlsGetValue
TlsSetValue
Sleep

setupapi

CM_Get_Depth_Ex
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

shlwapi

PathAddBackslashW

winmm

mciSendCommandW
sndPlaySoundW

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ