5e9dda13d263d13d8a3070cb1e54f66e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e9dda13d263d13d8a3070cb1e54f66e_JaffaCakes118
Size

16KB
MD5

5e9dda13d263d13d8a3070cb1e54f66e
SHA1

14a97a48dde0eda1a626ae1b1939d18c4048f2b1
SHA256

78ae82194732533750a021912048ef812213843bdf4a81b4cc383fc74df1cda9
SHA512

436d8850848c80db501460e468f0c023f2c4082418e2d4bd189d804e1f769d124ece5b2848638b00f2f6c142af20fea5bc7f7f6033e0e6d60e7929d8037f8198
SSDEEP

192:wfS4IWsm6eP/Q5agjbgjEJiq7C3f0dcR3ID+igQMDA:oQeP/Q5agvHQq76ap+ig9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e9dda13d263d13d8a3070cb1e54f66e_JaffaCakes118

Files

5e9dda13d263d13d8a3070cb1e54f66e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f21b7edad07a173e70b47f571f2e033

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

MessageBoxW
wsprintfW

kernel32

GetStartupInfoW
DeleteFileW
WriteFile
CloseHandle
VerSetConditionMask
GetProcAddress
GetExitCodeProcess
GetLastError
GetModuleHandleW
LoadResource
FreeLibrary
GetModuleFileNameW
CreateFileW
LoadLibraryA
SetEnvironmentVariableW
lstrcpyW
ExitProcess
CreateDirectoryW
GetCommandLineW
WaitForSingleObject
LockResource
GetTempPathW
SizeofResource
FindResourceW
RemoveDirectoryW

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ