f9705ace659aaf0d25cbdab4667a58ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9705ace659aaf0d25cbdab4667a58ea_JaffaCakes118
Size

50KB
MD5

f9705ace659aaf0d25cbdab4667a58ea
SHA1

d6274a2f9c4143c5246e846b739671924703498f
SHA256

6a7d26fdadbe059cf351f95214a066fdd0f08000798a0dc51d8b8832a51c0444
SHA512

5e389a6bc61a96cabe53b38c9327c5723215d4e9ddb9b61c3d8026afbd931cbb150790b1196610ad20d6c41573af895aef2c092e6ae67a05ce6e35ffe044c974
SSDEEP

768:MUGU4ba2vcdIdETn33F7Cy8uUUn6W389wH8nns8Jpro39/ec7C4WyP9j5W/9:D4z0vD3/8Ha5cnsAGCPyFk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9705ace659aaf0d25cbdab4667a58ea_JaffaCakes118

Files

f9705ace659aaf0d25cbdab4667a58ea_JaffaCakes118
.exe windows:5 windows x86 arch:x86

30c5691850cbf1c95cad563bb139e467

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA

user32

CloseDesktop
CloseWindowStation
GetClipboardData
GetIconInfo
GetKeyboardState
GetMessageA
GetWindowTextA
GetWindowThreadProcessId
OpenDesktopA
SetThreadDesktop

Sections

.vgpav
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svozcf
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lgh
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ