07e2de9acfcd617ed733d14ff8a04b6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07e2de9acfcd617ed733d14ff8a04b6e_JaffaCakes118
Size

276KB
MD5

07e2de9acfcd617ed733d14ff8a04b6e
SHA1

91ef540c959a448875a298fb71f51df2be2c08b8
SHA256

d7389010bb7e754aaf0ed5441bf79de6c79b0aab6e7ad1347de133cb3b71b59f
SHA512

885931e0f788b14bdb455d36de9c1a9a9573695b93ff73da5f86aee3def573853c109a2dc1e266f56c544817a6158f6d36d171df27a6f12662eaa6818d92601f
SSDEEP

6144:vsrScGPn+xuG5iWQxZ/uDGpawga0RKyId1mcnS5CbaA3znDDg3h:vsrIvPkiWQIGplg/Kr1UwaCDDDg3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e2de9acfcd617ed733d14ff8a04b6e_JaffaCakes118

Files

07e2de9acfcd617ed733d14ff8a04b6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51f528638084318d5552f9b372ebe7f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoUninitialize
CoInitializeEx

shell32

ShellExecuteW
ShellExecuteExW

user32

MessageBoxW
wsprintfW

kernel32

GetCommandLineW
CreateFileW
GetModuleFileNameW
LoadLibraryA
WriteFile
lstrcpyW
DeleteFileW
GetExitCodeProcess
CloseHandle
LoadResource
GetProcAddress
SetEnvironmentVariableW
LockResource
GetStartupInfoW
ExitProcess
WaitForSingleObject
GetTempPathW
SizeofResource
FindResourceW
GetLastError
FreeLibrary
GetModuleHandleW

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ