ab73ccc68e75ecfea73cb97f2bcca523_JaffaCakes118 | Triage

Sharing

General

Target

ab73ccc68e75ecfea73cb97f2bcca523_JaffaCakes118
Size

112KB
MD5

ab73ccc68e75ecfea73cb97f2bcca523
SHA1

7addb49009a7bba2788c6404f99b9acfc1eabacb
SHA256

28fd4e85bef08ed9f388f0b1764ef9fa91baf074fed0e7818e45dff9e43fc5aa
SHA512

8cf4fc0902d5d0726487598d08749b6e93f9e3dbb9463539214e681e86bbc3823fe0a3a1bbc5bef9eccb41c5d186659be59f173ec73ca0cbd607e71b3b91450f
SSDEEP

3072:FJ/g6Vw6EmPUAQ8rixiqw8hhMiVL6n2Vp:Fdw6q8rYiViOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab73ccc68e75ecfea73cb97f2bcca523_JaffaCakes118

Files

ab73ccc68e75ecfea73cb97f2bcca523_JaffaCakes118
.exe windows:5 windows x86 arch:x86

427a38bfeb421cc9741863e4fcbe46f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
SetCurrentDirectoryA
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gsarwro
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lqilagp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE