42d3556a7c11537309c33aa6f5f9d7bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42d3556a7c11537309c33aa6f5f9d7bc_JaffaCakes118
Size

104KB
MD5

42d3556a7c11537309c33aa6f5f9d7bc
SHA1

7dce9390417f470043a5613478225d09e9f5abc9
SHA256

9efb3cc10be69fd5ee2059df06e6761ed364c63af8f2046d113e5d2393663976
SHA512

82d79e785653dc502a09f61c8f2ee4bf4304ce5b27ae9aadb34734e58809e5f9f1b3dff772a98736e0a6e766277179d23e5ca7209f5f3bde6f6fb8f5f1c1304a
SSDEEP

1536:J9OgvHlDQPs6m6tKXj2983W+PL+1Ju6DZ9gMYs5v8SSNADLnlG458Km2:/OEtv5T22Lu46Dr90ADLnM458K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42d3556a7c11537309c33aa6f5f9d7bc_JaffaCakes118

Files

42d3556a7c11537309c33aa6f5f9d7bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

897bb75fe81ae1929c7ba42a40a262ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
CreateProcessA
GetEnvironmentVariableA
CreateDirectoryA
GetProcAddress
LoadLibraryA
WriteFile
GetModuleHandleA
GetVersionExA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA
WaitForSingleObject
LoadResource
FindResourceA
CreateFileA
LockResource
ExitProcess

setupapi

SetupIterateCabinetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

user32

wsprintfA
MessageBoxA

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ