893b9cfde64eb6fa1b523f66857b5038_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

893b9cfde64eb6fa1b523f66857b5038_JaffaCakes118
Size

232KB
MD5

893b9cfde64eb6fa1b523f66857b5038
SHA1

9bc590d228d3a522b2d9710dc6218f9281173eeb
SHA256

1c5aa47929688a2c866301a2fc926cc3fa9c3d7351b59b21834fdbccc20e5cee
SHA512

eba7a8b422d0f1faa9bd81d61b2c2358f59f655bd88fb70dd0481c22af42790cca4a59d7b2ab9dac5112c2f583a785f45d80bc2c19cc60d314c6bbfc22e60d56
SSDEEP

6144:KNAdD7bt04nn1vcl1Ap5bYXikP7K6iJv:9D7B04RchXikPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
893b9cfde64eb6fa1b523f66857b5038_JaffaCakes118

Files

893b9cfde64eb6fa1b523f66857b5038_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71c913cf43c20f0fa4a14a7a4f794436

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetEnvironmentVariableA
LoadResource
GetVersionExA
LockResource
CloseHandle
WriteFile
GetTempPathA
CreateDirectoryA
DeleteFileA
FindResourceA
WaitForSingleObject
lstrcpyA
ExitProcess
CreateProcessA
GetModuleHandleA
GetProcAddress
CreateFileA
SizeofResource

setupapi

SetupIterateCabinetA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

user32

wsprintfA
MessageBoxA

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ