146e6056bbe50843102aeb5d271cdc2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146e6056bbe50843102aeb5d271cdc2d_JaffaCakes118
Size

50KB
MD5

146e6056bbe50843102aeb5d271cdc2d
SHA1

182352e60b08c3afe1c990d1b52682d824a23a5d
SHA256

9bb5e2657a00da8d8efd5eec3711af21f801ae8d7f47b03dc3e96a29668eefb8
SHA512

c8dd495bdd09e8574faf188279990ff54c6063c576a56b3f3d8e2042e40cc072c932bfac635c301e3f08231a19c235a9858886282e7bcc3d083755fcbdb99783
SSDEEP

1536:7cjL+g34MdO6t5tHxZHnC3tQJ0gKZSwVYJbOhIY99wb:7OT3vHtHuA09ZZVVhIGwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146e6056bbe50843102aeb5d271cdc2d_JaffaCakes118

Files

146e6056bbe50843102aeb5d271cdc2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

764179eee56882e675b91ba665bc9254

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

wsprintfW
MessageBoxW

kernel32

GetStartupInfoW
LoadResource
lstrcpyW
GetExitCodeProcess
FindResourceW
GetModuleHandleW
DeleteFileW
CloseHandle
ExitProcess
GetVersionExA
GetLastError
GetModuleFileNameW
WriteFile
CreateFileW
LockResource
GetTempPathW
WaitForSingleObject
SizeofResource

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ