15b242eb5786c7b238c556aad31ae9c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15b242eb5786c7b238c556aad31ae9c0_JaffaCakes118
Size

92KB
MD5

15b242eb5786c7b238c556aad31ae9c0
SHA1

0e67503b96bdc063d37c0a7c5d32887681aa34aa
SHA256

348d752e621bb5272240bd9b4ea9903d2ceb53ae59e5998b316c107698d4d010
SHA512

6d20af7e6a86c39bf0075a2168df171d7df60e61235703c3a1de62fc988f0345e2047ee89a3b5b1339f25bfc991c039249f737e1e1b639ccb110304e9a4e8a6a
SSDEEP

1536:fbKjBFHrFKzLOBYwaNjT9tWI47vNflvxJzh6x1rNi2BDeTnt2KZ:fMzRKzSYwaNjT9OzN9Zmx1rNR89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15b242eb5786c7b238c556aad31ae9c0_JaffaCakes118

Files

15b242eb5786c7b238c556aad31ae9c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad82d7a61997191ce6b2a2614f92b531

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
CreateProcessA
GetModuleHandleA
GetTempPathA
WriteFile
GetVersionExA
CreateFileA
lstrcpyA
LoadResource
FindResourceA
GetEnvironmentVariableA
LoadLibraryA
ExitProcess
CreateDirectoryA
SizeofResource
LockResource
DeleteFileA
WaitForSingleObject

setupapi

SetupIterateCabinetA

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

user32

wsprintfA
MessageBoxA

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ