d0a8acebfd711962518e1e9e1c4ac50f_JaffaCakes118 | Triage

Sharing

General

Target

d0a8acebfd711962518e1e9e1c4ac50f_JaffaCakes118
Size

863KB
MD5

d0a8acebfd711962518e1e9e1c4ac50f
SHA1

66ae25f769d745d2a18f961192e4aec27856844c
SHA256

9915ccf200db0cabfbda4d31f8a6f631ce028fe7ae614d7662cb8299e9d60512
SHA512

e1464bf918b8620814c933ef115a2b08ae28de96d8e0070c572ca78387fb2a86c64a3eec31c54ce62d57d6c9d135e82ee52bc7f1763a27094bbf4ba511e627ba
SSDEEP

12288:I2/P6XhbThRZxdL6FZnuThjUD2/QziqnJgqBxT84Mk55vwSj0N98e2FSAyueuhGu:I2/StpxNJUecJ9rLMk5CXZaSiMWl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0a8acebfd711962518e1e9e1c4ac50f_JaffaCakes118

Files

d0a8acebfd711962518e1e9e1c4ac50f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27ba7c774af997b6078c3ab771763eac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcatA
UnmapViewOfFile
CloseHandle
WriteFile
GetFileSize
GetTempFileNameA
GetTempPathA
lstrcpyA
GetLastError
MapViewOfFile
CreateFileMappingA
CreateFileA
FormatMessageA
CreateProcessA
DeleteFileA
GetModuleFileNameA
ExitProcess
GetModuleHandleA

user32

MessageBoxA
wsprintfA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE