JaffaCakes118_73534d26ab40ee356ec097a7b04e5f93 | Triage

Sharing

General

Target

JaffaCakes118_73534d26ab40ee356ec097a7b04e5f93
Size

199KB
MD5

73534d26ab40ee356ec097a7b04e5f93
SHA1

33f1322c9cd474ae8cde7873418597ef58d036dc
SHA256

f56c042448a70e86c30519d880cbd0701ecf19968c32529bbb3fe3ac0b8a85da
SHA512

9ece9a0c2b7662be956ea94a21693f9963ddf27d949494d00c3edfa3ea3120097cbc14034019fc006e09ebbdc94e2125715762ee3856fe11448ae444c3811d76
SSDEEP

6144:wm2ucc2DmJq3jCEi5ojBZNoYsZazj0tsl:waV2DoeViujdofa8Wl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_73534d26ab40ee356ec097a7b04e5f93

Files

JaffaCakes118_73534d26ab40ee356ec097a7b04e5f93
.exe windows:4 windows x86 arch:x86

7efef03373158d645d98f3d066c820bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

CreateFiberEx
TlsGetValue
GetLastError
LoadLibraryA
TerminateJobObject
GetLocaleInfoW
EnumResourceNamesW
TlsFree
FlushFileBuffers
FoldStringW
GetCurrentThreadId
TlsAlloc
Sleep
VirtualProtect

user32

MapVirtualKeyW
RealGetWindowClass
LoadIconW
GetSystemMetrics

msimg32

AlphaBlend

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ