4155e40842576772d53f7df51f7f2826_JaffaCakes118 | Triage

Sharing

General

Target

4155e40842576772d53f7df51f7f2826_JaffaCakes118
Size

104KB
MD5

4155e40842576772d53f7df51f7f2826
SHA1

69085310e27e8ce15d8aff491d0b2dfba08baee4
SHA256

9700463d8bbf33074e3278c19bfc70a11759f3985bc7b84a360193a8c6ac19dc
SHA512

836cde4827c180e2de40196b3f35f098c2ec4c7db3d4a50c39237c82b74f6d4a444cc23df2436822a4593fad98cdbc7579e07858dfbbd3d9f3cb621001722897
SSDEEP

3072:MOP0VSKz/uzA+9Tt1lTnvAOFTntnrILaDYo:MOPzGWzvlIOJtnUuk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4155e40842576772d53f7df51f7f2826_JaffaCakes118

Files

4155e40842576772d53f7df51f7f2826_JaffaCakes118
.exe windows:4 windows x86 arch:x86

897bb75fe81ae1929c7ba42a40a262ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
CreateProcessA
GetEnvironmentVariableA
CreateDirectoryA
GetProcAddress
LoadLibraryA
WriteFile
GetModuleHandleA
GetVersionExA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
WaitForSingleObject
LoadResource
FindResourceA
CreateFileA
LockResource
ExitProcess

setupapi

SetupIterateCabinetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

user32

wsprintfA
MessageBoxA

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ