03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118
Size

84KB
MD5

03ad84bf2fa2fd66b57f649ad77f1e4a
SHA1

0dc3b81fe81ca625968f68c3ec2dd27a7f50e0cd
SHA256

8dfceca891f87a5e96559bb88438d3a41522bc56dea32e79b08bda54683f85c1
SHA512

9686f4bdc023ff084955b759f9454e3f031f6d1080a2e0b1b2e0b3786387b29eb96a72715b823c1b1cdc00f75d6df9332cad651c9a61d7e4e2faf8d0db972d96
SSDEEP

1536:VOXDwSt+RnhzshkZpWjrBOXMRSubS3CHoIMkwvhAZQwBa2FE4Dk:VOXDwStSEBOXeSCSBIBqAL5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118

Files

03ad84bf2fa2fd66b57f649ad77f1e4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

897bb75fe81ae1929c7ba42a40a262ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
CreateProcessA
GetEnvironmentVariableA
CreateDirectoryA
GetProcAddress
LoadLibraryA
WriteFile
GetModuleHandleA
GetVersionExA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
WaitForSingleObject
LoadResource
FindResourceA
CreateFileA
LockResource
ExitProcess

setupapi

SetupIterateCabinetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

user32

wsprintfA
MessageBoxA

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ