73614896dc45b01042ed6b5d845a5bc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73614896dc45b01042ed6b5d845a5bc7_JaffaCakes118
Size

371KB
MD5

73614896dc45b01042ed6b5d845a5bc7
SHA1

138e6a5b5b9363ca71da8f931c0a1e1f68b14e17
SHA256

4489bea50b54b24bb91eb2b7dcbcd6d9d0cf13fab0692ebf5046e71d8bf50e3c
SHA512

1446e2e0791183fafdff6f3da297eccb104dc0ecd82370282cede7cbc5288e76050b6e3beb5e505a54be7ceaa66a1bde3e7846efd711a6724142d5a6d9ed022c
SSDEEP

6144:2ptx/dt/G2M6tggRko7ZCNc8kyM+3pzH0NUZyRoXZ1zobWH5NZVO8jgsqZGa6YC:gx/d8h6HTZKvZzH0+ZaoXfhHzzgsqZ7y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73614896dc45b01042ed6b5d845a5bc7_JaffaCakes118

Files

73614896dc45b01042ed6b5d845a5bc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b4f8be127c34782316ca56a5e6cb01d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoUninitialize
CoInitializeEx

shell32

ShellExecuteExW
ShellExecuteW

user32

MessageBoxW
wsprintfW

kernel32

GetExitCodeProcess
GetTempPathW
LockResource
WaitForSingleObject
GetCommandLineW
GetStartupInfoW
ExitProcess
lstrcpyW
SetEnvironmentVariableW
LoadLibraryA
CreateFileW
SizeofResource
FindResourceW
FreeLibrary
LoadResource
GetModuleHandleW
GetLastError
GetProcAddress
VerSetConditionMask
CloseHandle
WriteFile
DeleteFileW
GetModuleFileNameW

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 644KB - Virtual size: 642KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ