5e2d2fee8d4b7a8cc505d316bccd16ec_JaffaCakes118 | Triage

Sharing

General

Target

5e2d2fee8d4b7a8cc505d316bccd16ec_JaffaCakes118
Size

309KB
MD5

5e2d2fee8d4b7a8cc505d316bccd16ec
SHA1

56a651cb34c95ea963a834e020c6aec438beab31
SHA256

f74b7d6defe2beb13ecebed597072dbbaf91e80fadc66f2bd335c0ffab088d8f
SHA512

4cdf44caf20c6c911bad7b9575367fe85fee9a2212c37b626b0f742927acff2502db265cc44ea5ed3c16730d1396cebaf3a8ede352f66766533b62fb1ac26ba5
SSDEEP

6144:8vNkVVgYrbyBzmfkkum4hsDInXfqxdd3eL/fGW66DmXpOqzqwwz8I:8vNkkIby53hsDCXyxddGGmSAw28I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e2d2fee8d4b7a8cc505d316bccd16ec_JaffaCakes118

Files

5e2d2fee8d4b7a8cc505d316bccd16ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

764179eee56882e675b91ba665bc9254

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

wsprintfW
MessageBoxW

kernel32

GetStartupInfoW
LoadResource
lstrcpyW
GetExitCodeProcess
FindResourceW
GetModuleHandleW
DeleteFileW
CloseHandle
ExitProcess
GetVersionExA
GetLastError
GetModuleFileNameW
WriteFile
CreateFileW
LockResource
GetTempPathW
WaitForSingleObject
SizeofResource

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ