ead8582ec4b0766164a7ba5438057ede_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ead8582ec4b0766164a7ba5438057ede_JaffaCakes118
Size

46KB
MD5

ead8582ec4b0766164a7ba5438057ede
SHA1

885a43b9efdbe4b35db05dddba9f326c62913df6
SHA256

dd506389b49671dae14c155449612a423bf0c0a3b0183dca6a4b7785c88548dc
SHA512

f0c60b14287de036c08b70c8b9ba63385f8a8d1306f1ae417084a71a3d32a177876f63efd6c9beae462944a2b02104de12e0bc5d24eb28ba7e68ca680c9b86eb
SSDEEP

768:QPYevwnjErdyZbfh/QuZausr8N7ywFYaeWvbLcSGoX:QPYevQMd2fTZvsrE7pUiLc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ead8582ec4b0766164a7ba5438057ede_JaffaCakes118

Files

ead8582ec4b0766164a7ba5438057ede_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e87ff6b93b2aba680516057f11073e6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpNIW
wvnsprintfA
wvnsprintfW
StrStrW
PathCombineW
StrCmpNIA
wnsprintfW
wnsprintfA
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
PathMatchSpecW
PathFileExistsW

advapi32

DuplicateTokenEx
CryptCreateHash
RegCloseKey
RegQueryValueExA
RegDeleteValueA
CryptReleaseContext
CryptGetHashParam

Sections

.qxcvkr
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtuz
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tglsd
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ