85e6a75c8cd917ff3924d97e7d72fffd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85e6a75c8cd917ff3924d97e7d72fffd_JaffaCakes118
Size

10KB
MD5

85e6a75c8cd917ff3924d97e7d72fffd
SHA1

517f78aabd16fde9026c91b480a2e91017049be6
SHA256

6c1ce4cae24208890cdc333e1b8a3b95c34de449c630831ebae43a9d6afcc00c
SHA512

fe6027a4719f457b8eff3c1f222d48d96ebd5f5305e20451b9cd51e4dfc518cf946d6306d2e56ced4d8726f92fcb26d3574a17c6c45bd809414d4b5fb9d43b62
SSDEEP

96:wuiS4IWsm6eMe/SX5agjH7gjEJ4vqV9e:wfS4IWsm6eP/Q5agjbgjEJiq7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85e6a75c8cd917ff3924d97e7d72fffd_JaffaCakes118

Files

85e6a75c8cd917ff3924d97e7d72fffd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f21b7edad07a173e70b47f571f2e033

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

MessageBoxW
wsprintfW

kernel32

GetStartupInfoW
DeleteFileW
WriteFile
CloseHandle
VerSetConditionMask
GetProcAddress
GetExitCodeProcess
GetLastError
GetModuleHandleW
LoadResource
FreeLibrary
GetModuleFileNameW
CreateFileW
LoadLibraryA
SetEnvironmentVariableW
lstrcpyW
ExitProcess
CreateDirectoryW
GetCommandLineW
WaitForSingleObject
LockResource
GetTempPathW
SizeofResource
FindResourceW
RemoveDirectoryW

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ