JaffaCakes118_70ab80e5a6464ffb9503e297e92505e1 | Triage

Sharing

General

Target

JaffaCakes118_70ab80e5a6464ffb9503e297e92505e1
Size

178KB
MD5

70ab80e5a6464ffb9503e297e92505e1
SHA1

3a6bcdfdfecd3116170d7f0d94f0535268fcf982
SHA256

1cac94b28c9f606fc435ef9cc5a03b9931711bbe26abb5e76a61a29f506606bb
SHA512

f566caf74cd31c6ede6bbd660145311ba0db9e2283265b998579e0b6f80eff5ffdb9f0e06b3db4c66564bdab496003359c6fb31ea8789af02e6fe2bdb3ab935d
SSDEEP

3072:jl7Yqtak+8h/a3mY+2mufP/KzeN65azCFfDQhovWuRXomTsQLntHExnoCT9d4CV3:h7YqAk5h/a3mY+Z06aNzCVDQhoh7tBEj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_70ab80e5a6464ffb9503e297e92505e1

Files

JaffaCakes118_70ab80e5a6464ffb9503e297e92505e1
.exe windows:4 windows x86 arch:x86

5be53fe99332efcac0d701b1fec17645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
BaseInitAppcompatCacheSupport
MultiByteToWideChar
GetModuleHandleA
lstrlenW
GetSystemDirectoryA
WideCharToMultiByte
lstrlenA
EnumResourceTypesA
lstrcpyA
GetDiskFreeSpaceA
CloseHandle
GetProcAddress
CreateMailslotA
GetModuleFileNameA
IsBadReadPtr
Sleep
GetSystemInfo
MoveFileExA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

gdi32

GetStockObject

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ