20f02622a7cde70713aa0d62e91457f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20f02622a7cde70713aa0d62e91457f7_JaffaCakes118
Size

92KB
MD5

20f02622a7cde70713aa0d62e91457f7
SHA1

51394c8790da1f5014459dd0f0c6aa003a43210c
SHA256

87166f1253b39559b5aa668b71c0836733eebbccbca293fe34579e3c8bb341cc
SHA512

7f84033cbd76bf98dab53c74dcb39b9e35b11b06f582b72507ceaf53e51e44e25d9db3af64dc557cdc4fe47fccb1a2f14835d0a8e1420b1f14d7ebfb514e7361
SSDEEP

1536:2aqXTkN843FKOEde+0iU/E9Aon5vp6vpoCZ/Oc7pVXVnMDPFC1MuH86Ml0KgA:2aiTkN841KOS0dcX5vsisr7pVlsPFCb0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f02622a7cde70713aa0d62e91457f7_JaffaCakes118

Files

20f02622a7cde70713aa0d62e91457f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

897bb75fe81ae1929c7ba42a40a262ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
CreateProcessA
GetEnvironmentVariableA
CreateDirectoryA
GetProcAddress
LoadLibraryA
WriteFile
GetModuleHandleA
GetVersionExA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
WaitForSingleObject
LoadResource
FindResourceA
CreateFileA
LockResource
ExitProcess

setupapi

SetupIterateCabinetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

user32

wsprintfA
MessageBoxA

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ