73c8f7ed09df5c59dcf5d6edbf19ac89_JaffaCakes118 | Triage

Sharing

General

Target

73c8f7ed09df5c59dcf5d6edbf19ac89_JaffaCakes118
Size

66KB
MD5

73c8f7ed09df5c59dcf5d6edbf19ac89
SHA1

ce6f148f11ab3e96cd67dc317e3e26c57ea02b2e
SHA256

7ac8c567f7edc87b90548cea64d4814b63295d4fc821f5c2dca02869cc155a6c
SHA512

1dc25d0cd6d397b30641a34631f8730a467e93c7f616c1551c1bb9198710423e40f7800d277789677f34bc2c810734e1077ad0f1104357352d2e544397336ee8
SSDEEP

768:D4AawsRXatSml3PI9YDqEuaoOZYMaXgzVZk9yvRQlDMV/S2Vu9OJvGfpeetZSV+/:Dsob7kYvRH8kfJAIx+xZXMofbHqcYer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73c8f7ed09df5c59dcf5d6edbf19ac89_JaffaCakes118

Files

73c8f7ed09df5c59dcf5d6edbf19ac89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec6e7a2bf6068d2a261bfe3b3c135a89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringW
ReplaceFile
FlushFileBuffers
DebugActiveProcessStop
GlobalGetAtomNameA
DefineDosDeviceW
GetCompressedFileSizeW
WriteTapemark
BaseFlushAppcompatCache
SetEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE