54b8be3a03e39cffd676af4318278eef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54b8be3a03e39cffd676af4318278eef_JaffaCakes118
Size

118KB
MD5

54b8be3a03e39cffd676af4318278eef
SHA1

14c2f271c4f839584395f9da6d153074a201ef2e
SHA256

02eeff8a48af20eee9505956b408d919eb2fd84568a7fa58e022b64775da4a1b
SHA512

9200740e29965b1108a2055f26a17a5efc6a26a8f6bdef21ebc85c3fffd820f357cc0ad5ecce4568a7dd6feeecf21bba4e2841597f3ea583047d3afc2e6319b1
SSDEEP

3072:rsucBR1e0sOL3ehaiMqZr6l8WJ0QrZU7tKEza4hU:jc9fNidhcfJbtU7tFza4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54b8be3a03e39cffd676af4318278eef_JaffaCakes118

Files

54b8be3a03e39cffd676af4318278eef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7abd50787a58350f3b8292e1d805485d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LockResource
FindResourceA
LoadResource
GetModuleHandleA
LoadLibraryExW
VirtualFree
SizeofResource
WinExec
FreeLibrary
LoadLibraryA
CreateFileA
GetTempFileNameA
GetTempPathA
WriteFile
GetProcAddress
CloseHandle
GetTickCount
SearchPathA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
MoveFileExW
GetCommandLineW

user32

UpdateWindow
DefWindowProcA
BeginPaint
EndPaint
PostMessageA
ShowWindow
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
PostQuitMessage
CreateWindowExA

shell32

CommandLineToArgvW
SHGetFolderPathA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ