daecd0e8e9dc45d8d80fee5367e42945_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daecd0e8e9dc45d8d80fee5367e42945_JaffaCakes118
Size

12KB
MD5

daecd0e8e9dc45d8d80fee5367e42945
SHA1

41b6103fca383c1359a4a387050f39c9efdec6e2
SHA256

5da2c67ab18ca88c1f4ad7b8d8cc806573766f3569e7c8547b650ca9c4518ef0
SHA512

fce735c7eee0165925e5f64cb8a01f327cb9c20f630f6d24eeea54e01062dfb5d3ef48c9d4c91ed680c25268d707cad3952f810406ea6359cad8acc1124ff6cc
SSDEEP

384:7+YaV/d7i2W2vTvXZkgeKAzKDD3W5d66S4:7sv7jrvXOg5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daecd0e8e9dc45d8d80fee5367e42945_JaffaCakes118

Files

daecd0e8e9dc45d8d80fee5367e42945_JaffaCakes118
.exe windows:4 windows x86 arch:x86

764179eee56882e675b91ba665bc9254

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

wsprintfW
MessageBoxW

kernel32

GetStartupInfoW
LoadResource
lstrcpyW
GetExitCodeProcess
FindResourceW
GetModuleHandleW
DeleteFileW
CloseHandle
ExitProcess
GetVersionExA
GetLastError
GetModuleFileNameW
WriteFile
CreateFileW
LockResource
GetTempPathW
WaitForSingleObject
SizeofResource

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ