30545aea08d603a820e2f74e8e53cea6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30545aea08d603a820e2f74e8e53cea6_JaffaCakes118
Size

121KB
MD5

30545aea08d603a820e2f74e8e53cea6
SHA1

7fb0177b0865feee6b1c530da39ec64fd8e9e0fc
SHA256

b70dfc0613b7363e6216b5e6d3a96ad8d3fb3d69212a5b9c59772ba4c0b20e4b
SHA512

a557534df6b87ea2cd374f48ccb2de3c60f13cb67f4b704f718d11697e6ed86d6c769b1f6a77ff0c0d8a459bda84c1e5e3956dd2bcaef3e71df9b7100c8ac0e7
SSDEEP

3072:7cW4PyDvtuD5MjEOL/DRQHhrX4yV83WbdDKc9GI6ZdZRPpM:8Ui54LNo5rV837coZdZRPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30545aea08d603a820e2f74e8e53cea6_JaffaCakes118

Files

30545aea08d603a820e2f74e8e53cea6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

764179eee56882e675b91ba665bc9254

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoInitializeEx
CoUninitialize

shell32

ShellExecuteW
ShellExecuteExW

user32

wsprintfW
MessageBoxW

kernel32

GetStartupInfoW
LoadResource
lstrcpyW
GetExitCodeProcess
FindResourceW
GetModuleHandleW
DeleteFileW
CloseHandle
ExitProcess
GetVersionExA
GetLastError
GetModuleFileNameW
WriteFile
CreateFileW
LockResource
GetTempPathW
WaitForSingleObject
SizeofResource

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 569KB - Virtual size: 569KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ