73b9f93f90922f582c34fb92f205e5a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73b9f93f90922f582c34fb92f205e5a4_JaffaCakes118
Size

180KB
MD5

73b9f93f90922f582c34fb92f205e5a4
SHA1

bd9eb5dfdd70152e20da54994f7684088f84b8a1
SHA256

00e9a9e02d6724e4f9681199667739f23fd5cbb7ec984362262c1cb46fe8178b
SHA512

8ed2724eb2ef46c6c3c06a5ea1fe86dfd3df97b46b9b5a92c208e1beef03685ddd26856940e513f5b7da9a73c59ae436b940a708a4ac91b812d215b488fae568
SSDEEP

3072:PFDuUkCT3P+M4kRB8AVhl2ENttlW5u+UGl6y0Qw8wjJ626BOA69TKn9/UF:dlkWz4kRiUtllYloQlwjE29AQTKC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73b9f93f90922f582c34fb92f205e5a4_JaffaCakes118

Files

73b9f93f90922f582c34fb92f205e5a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9224924e016053b8d95f13d939b020a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
CreateProcessA
BaseInitAppcompatCacheSupport
Sleep
GetSystemInfo
WideCharToMultiByte
GetModuleHandleA
GetDiskFreeSpaceA
EnumResourceTypesA
lstrcpyA
lstrlenW
MultiByteToWideChar
CreateMailslotA
IsBadReadPtr
lstrlenA
GetModuleFileNameA
GetProcAddress
CloseHandle
MoveFileExA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

gdi32

GetStockObject

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ