ec9c70bd474c52ede38ccaa6985e7f6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec9c70bd474c52ede38ccaa6985e7f6c_JaffaCakes118
Size

54KB
MD5

ec9c70bd474c52ede38ccaa6985e7f6c
SHA1

549fa3b071590fabdc8919e0a0d8b23d3749c1f1
SHA256

c92cb1636e7d475752bff969e73ddf9ffb79ecbe2ab11a26a35ce5427da1f2d2
SHA512

6a980f20d94cafcb6f20529b1a56dc59c81663e3a5c8b550f7886956593805e82ede8a79162aba31e2d8891c3c59a7d6e6d96a3d665501392994466c37283711
SSDEEP

768:lwEAvwSqCpIsTuqatG/VjdeOMtj4/aeo1Za/gAqu7nuIjMuu5e0KwN1vFALE:OEPFAotMjdeZjOsZKNuIj/2e0xDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec9c70bd474c52ede38ccaa6985e7f6c_JaffaCakes118

Files

ec9c70bd474c52ede38ccaa6985e7f6c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

22ed40775822bd99776a302e64ae96b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
CharUpperW
CloseDesktop
DrawIcon
EndDialog
ExitWindowsEx
GetCursorPos
GetForegroundWindow
GetMessageA
LoadCursorA
PeekMessageA
SetProcessWindowStation

Sections

.duz
Size: 44KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ver
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zmd
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ