73da14555a1bd6922efca0734c306f55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73da14555a1bd6922efca0734c306f55_JaffaCakes118
Size

358KB
MD5

73da14555a1bd6922efca0734c306f55
SHA1

da81ba5577c34d5a99815d89edde96258fdb78c6
SHA256

3e13c79a6efe2fe23e2dc9d01c1ed4f21fb491d0ffff122004b771f30e7bcae6
SHA512

32e2e6f3620893701eaa90b094ea7b05ac64fe4487dbfde54918d0b6b726d1bf31e4fc213702de6c1f4b58ee31177cd1f085f8ebe09f8f73120ae1e5b6ccf99c
SSDEEP

6144:h4smvkh2wB+61LBOGeSsQteetllEF7Cs1RHi4jOW2COGXclc8penaeG:h4smvkhLTLB3vsWPvEF7j12GMQa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73da14555a1bd6922efca0734c306f55_JaffaCakes118

Files

73da14555a1bd6922efca0734c306f55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fbd40a44fd814192e2addd32746f3d07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindResourceExA
SearchPathA
GetConsoleFontSize
FindAtomA
ReleaseMutex
DeleteCriticalSection
SetEvent
ExitProcess
GetTickCount
GetDiskFreeSpaceA
Sleep
FindVolumeClose
GetModuleHandleA
FindClose
VirtualProtect
CreateThread
GetLastError
lstrlenA
TlsGetValue

user32

IsIconic
GetKeyState
CopyImage
DialogBoxParamA
EndDialog
GetScrollBarInfo
CloseWindow
DragDetect
DispatchMessageA
GetMessageA
CreateWindowExA
CopyIcon
CreateMenu
EnableWindow

wshbth

NSPStartup
WSHJoinLeaf
WSHIoctl
WSHOpenSocket2
WSHNotify

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ