f92f26fc755df0869afbe609045807e0_JaffaCakes118 | Triage

Sharing

General

Target

f92f26fc755df0869afbe609045807e0_JaffaCakes118
Size

50KB
MD5

f92f26fc755df0869afbe609045807e0
SHA1

0a8f95e4be377b8912c0514dfc5d5195984506ad
SHA256

f2cd2037a2cc9ff3e617149652b22eb4256f64702760025727e2e2d3fe59715b
SHA512

12a210b79cdc6d003c2b8c054df410070028f55348429dee9f4c5fd0d5a88b26cc9dd33e48139008f2b46a3a7e76d7a6f22daad6b6df0ebaee00f33e4f6e0cf4
SSDEEP

1536:48xQ2QSfFgMZtd02fZ4aMg8/S7b8l8WWL04Vc6:NdJfGZeZ49gP7bG0nVc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f92f26fc755df0869afbe609045807e0_JaffaCakes118

Files

f92f26fc755df0869afbe609045807e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2214af4863b8966a517872070fa02f61

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

kernel32

FindFirstFileW

shlwapi

PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wvnsprintfW

user32

CharLowerBuffA
CloseDesktop
CloseWindowStation
GetForegroundWindow
GetKeyState
GetWindowLongA
GetWindowThreadProcessId
LoadCursorA
OpenWindowStationA
SendMessageA
SetThreadDesktop

Sections

.ujobwf
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enmdkj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vst
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ