73a703d8da707c55259bd2661de59465_JaffaCakes118 | Triage

Sharing

General

Target

73a703d8da707c55259bd2661de59465_JaffaCakes118
Size

83KB
MD5

73a703d8da707c55259bd2661de59465
SHA1

02785f4a2ce8ad36a2f47b34d912b2b4007f75a1
SHA256

331b045f2abf66fc8ff91231b16f627ed69c5708b3551c8a51bc06087efcb988
SHA512

a85b45cffead3767d07679a1933ede3c9622799ab84708195a4ae5d6803d8680f4cb4c05b97b8589a7f43d8d9ee18c5ce3ba06b0bbc13f22134acf6fed9bf319
SSDEEP

1536:+0dHBk0YTyRjv35N7CI3EGIzdl0liKrpx9HyiDxPmOhArdWvVy3T2Rh6f3lN:++kF0jvnCI3Ed0liKr1S2vAOcfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73a703d8da707c55259bd2661de59465_JaffaCakes118

Files

73a703d8da707c55259bd2661de59465_JaffaCakes118
.exe windows:4 windows x86 arch:x86

876699cbe43193ca7d7cb6c9812e0bb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
ExitProcess
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
CreateProcessA
GlobalAlloc
GlobalFree
LoadLibraryA
SetPriorityClass
SetThreadPriority
VirtualAlloc
VirtualFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE