81e0e3d769638dc671e2ded3e43ac740_JaffaCakes118 | Triage

Sharing

General

Target

81e0e3d769638dc671e2ded3e43ac740_JaffaCakes118
Size

112KB
MD5

81e0e3d769638dc671e2ded3e43ac740
SHA1

301d819d17a4f7a8d6658d2aa4c13ed0f2d2b74a
SHA256

a266f545624813b46e0a929a3645398397f203e89cb97dbd42325d1f3e7d7f45
SHA512

ffdcb474bc840078808ce27d88764b71ec57541165a48f457f93d130f95e928344e7874a5fc7a1a48edea279f80ee22e6623fb8da34a37f9125e97a74019ff20
SSDEEP

1536:+TUwSzpVwon2mpdMz8Hfmkwuzt4yUALJ4PZbqU20PzcKvJHqhXXWgRtd2DHZwe0g:+YBpVwo2mpyz8+MzOdPBvQWkb8OV49X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81e0e3d769638dc671e2ded3e43ac740_JaffaCakes118

Files

81e0e3d769638dc671e2ded3e43ac740_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f21b7edad07a173e70b47f571f2e033

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

MessageBoxW
wsprintfW

kernel32

GetStartupInfoW
DeleteFileW
WriteFile
CloseHandle
VerSetConditionMask
GetProcAddress
GetExitCodeProcess
GetLastError
GetModuleHandleW
LoadResource
FreeLibrary
GetModuleFileNameW
CreateFileW
LoadLibraryA
SetEnvironmentVariableW
lstrcpyW
ExitProcess
CreateDirectoryW
GetCommandLineW
WaitForSingleObject
LockResource
GetTempPathW
SizeofResource
FindResourceW
RemoveDirectoryW

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 664KB - Virtual size: 662KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ