f76c7c5f6f7d434d7b721d1ab7f9e576_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f76c7c5f6f7d434d7b721d1ab7f9e576_JaffaCakes118
Size

48KB
MD5

f76c7c5f6f7d434d7b721d1ab7f9e576
SHA1

8ab36ae917a6d3d7f1337b37822519eadd446f23
SHA256

54faeae8f4f2b8ba1c40bbd6408e9ea69488b87d7eb43d09f5789e150b5bf3a2
SHA512

661b7278951f0c14ae9693f2b02004b98c7120f75f4394e49df7289289fee724fdb240fc8b79029bf0a9b3b0c7d7f1085d3a646cdf014bb72e07c02aa0bb1cae
SSDEEP

768:7sZpBFLf3TpGMn1rUaYHbUDcBr3u3QhoZJ77OAvirTB99dFYfpE07LxM3zo//LTn:oZxLfDbBYWcZ+xfCAmj9dyf6ILW3zI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f76c7c5f6f7d434d7b721d1ab7f9e576_JaffaCakes118

Files

f76c7c5f6f7d434d7b721d1ab7f9e576_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab0cf449cf0c84a76cde3ea818432f05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

GetLastError

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIA
StrStrW
wnsprintfW
wvnsprintfW

user32

CharLowerBuffA
CloseDesktop
DispatchMessageA
ExitWindowsEx
GetClassNameA
GetIconInfo
GetWindowTextA
LoadCursorA
PeekMessageA
SendMessageA
SetProcessWindowStation

Sections

.lunul
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ilsbof
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jip
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ