JaffaCakes118_eb73f2c78e339f39bcb636a843e8c083 | Triage

Sharing

General

Target

JaffaCakes118_eb73f2c78e339f39bcb636a843e8c083
Size

175KB
MD5

eb73f2c78e339f39bcb636a843e8c083
SHA1

3d65ba4fc1a9953ef20eec715c29f7edfd323211
SHA256

25c3266b22e4ada9c1ffff1a383c9cf873e293f847296e98235d24c09f13cef2
SHA512

bd06574bf1a297c596e988e90b2ba52b4d498b326a081b115f6e3ba8aa9c584e174a7334aad0ad03a91d557730651e603d597d3f13d1651c6d13cc6159d67af8
SSDEEP

3072:ASZlGpwW2QnGISR/sNBE78oryFsY45Q3EuPz9JFp+Oyl8oiiZdWKOO:ASZ+72Qn7C/4a8orNh5QUuPDSJWoBd2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_eb73f2c78e339f39bcb636a843e8c083

Files

JaffaCakes118_eb73f2c78e339f39bcb636a843e8c083
.exe windows:4 windows x86 arch:x86

2443dbee32205bbbf9e40e2e31ffb733

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathAddBackslashA

kernel32

GlobalAddAtomW
GetProcAddress
ResetEvent
GetFullPathNameA
SetEvent
LoadLibraryW
GetTickCount
DeleteCriticalSection
lstrcpyA
WaitForSingleObject
EnumResourceNamesA
LeaveCriticalSection
IsDBCSLeadByte
CreateThread
VerLanguageNameA
GetTempPathA
GetTimeZoneInformation
EnterCriticalSection
OutputDebugStringA
LoadLibraryA
InitializeCriticalSection
FileTimeToSystemTime
Sleep
GetFullPathNameW
FreeLibrary

setupapi

InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

winmm

mciSendCommandA
sndPlaySoundA

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ