1528edb1ef22986ecb3f3c9df984ea53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1528edb1ef22986ecb3f3c9df984ea53_JaffaCakes118
Size

233KB
MD5

1528edb1ef22986ecb3f3c9df984ea53
SHA1

5a0f6476b1ed468eabe1de08c044dba2e72a0340
SHA256

0095b1a2430ce27af3d34527419ec7e45c98c11c24ba1565e04b4846ed880aeb
SHA512

47d174188cbde8c7ce5b1b6f50fa36018c1d680bc035ba0ab307b223a979a3fcc7decba590cb6be2555741bebfcee4cfb2dce1ff4fd9f1a8cb37c86027157ad0
SSDEEP

6144:8vNkVVgYrbyBzmfkkum4hsDInXfqxdd3eL/fGW66A:8vNkkIby53hsDCXyxddGGmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1528edb1ef22986ecb3f3c9df984ea53_JaffaCakes118

Files

1528edb1ef22986ecb3f3c9df984ea53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

764179eee56882e675b91ba665bc9254

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

wsprintfW
MessageBoxW

kernel32

GetStartupInfoW
LoadResource
lstrcpyW
GetExitCodeProcess
FindResourceW
GetModuleHandleW
DeleteFileW
CloseHandle
ExitProcess
GetVersionExA
GetLastError
GetModuleFileNameW
WriteFile
CreateFileW
LockResource
GetTempPathW
WaitForSingleObject
SizeofResource

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ