d339beb623e2fc6bd8c6c6cd8f5f2c66_JaffaCakes118 | Triage

Sharing

General

Target

d339beb623e2fc6bd8c6c6cd8f5f2c66_JaffaCakes118
Size

7.3MB
MD5

d339beb623e2fc6bd8c6c6cd8f5f2c66
SHA1

79c6ccac826ea5ea391229e26739b3d9d3824f53
SHA256

b5383687485748d8a488322499fa215c6a9d838823df90274d272007680aca5e
SHA512

a76504269345a9bbdb707114ac00c10a585f1cb4610b98f2cc640b23ab722b0c5c1d0fdfc3a58a4ce08454c3c4b8c7d1f687e9551dc570f08c22118ccbe0a950
SSDEEP

196608:tHqfPCcdh1noY7LGh3SxaN0JDbnPnj62oiba:tHq3CmjPnGBSsN0JD7G2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d339beb623e2fc6bd8c6c6cd8f5f2c66_JaffaCakes118

Files

d339beb623e2fc6bd8c6c6cd8f5f2c66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9e2d1af89960704a762cc63e754ecfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\b\slave\chrome-official\build\src\chrome\Release\mini_installer.pdb

Imports

shlwapi

StrStrW

kernel32

GetModuleHandleW
lstrcpyW
GetLastError
GetLongPathNameW
ExitProcess
RemoveDirectoryW
CreateProcessW
GetTempFileNameW
GetExitCodeProcess
EnumResourceNamesW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
GetModuleFileNameW
lstrcatW
lstrlenW
CloseHandle
FindResourceW
LoadResource
WriteFile
SizeofResource
CreateFileW
LockResource
DeleteFileW
lstrcmpiW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ