73216988fdbc831458305ceea844e000_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73216988fdbc831458305ceea844e000_JaffaCakes118
Size

297KB
MD5

73216988fdbc831458305ceea844e000
SHA1

1360dcac5f8db76108f13551b002d7854a2335a4
SHA256

666b90e0fdcde274af253ad1d38630b91563d4ad47303afd4fdc10d7fdb566e0
SHA512

bdf8c10587522d98d3b0f8dd4e82fcd24d3de5608a081ad3dedc944ec266aa393d4113123f44ad8157555b55dfc3cc5b5d60580c63e723b8540b5ec459038a6a
SSDEEP

3072:jUpe775PXLpomWqLEnCYvcvIXRTy1hmUI0xlOcw4IvS3oGcFuG9hFoHk148GzMwr:e4X+vDx8hzNxl84IvSiFxTO8GzM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73216988fdbc831458305ceea844e000_JaffaCakes118

Files

73216988fdbc831458305ceea844e000_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03b7edfe7371cd842d19e16ff77e0eb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
LoadLibraryW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ