73cc767e2223398180bc5352f342b318_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73cc767e2223398180bc5352f342b318_JaffaCakes118
Size

101KB
MD5

73cc767e2223398180bc5352f342b318
SHA1

87b7b9e85f82470db6a552e73ba622b96106baf9
SHA256

00509b89585d2923414b9a0d51033d9370206a1ecd0a46a70f6b1c03d525f2b2
SHA512

16ac1dc57534e3b4589a940ec0de68ed1ae27c21788098b313f006e49978f56747045b34e51bd765ae098b05375e2bbaa932f5a5ac094c7c1ce6e3c6869f9cb1
SSDEEP

1536:lYQNerx0r24ChbpVjr7tj89CFws0Fw0jxniFMajbQMLgapKnuFR3szpeLi8nFQDu:VOx0r244pVjrBHFlt0jgvkapKce8LC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73cc767e2223398180bc5352f342b318_JaffaCakes118

Files

73cc767e2223398180bc5352f342b318_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7631b7d2e4f2d23d3e370ffe315f5187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateProcessA
MoveFileExA
GetModuleFileNameA
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
CloseHandle
CreateFileA
GetTickCount
GetWindowsDirectoryA

msvcrt

memset
_strlwr
swprintf
strlen
fclose
fwrite
fopen
strncpy
fread
strcat
strcpy
sprintf
_stricmp
strrchr
rand
srand
_snprintf

setupapi

SetupIterateCabinetA

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ