fdd0130a5bedfe39f2fa6899684282e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdd0130a5bedfe39f2fa6899684282e8_JaffaCakes118
Size

48KB
MD5

fdd0130a5bedfe39f2fa6899684282e8
SHA1

dd570ac0f0743ac3b257324e55a84137453f54b2
SHA256

d3ad30d2ce76e3ac2238bfb741fe75d9e0ec58fc4eb043f420baaa6b2a3a71ae
SHA512

442b95850b14317ae88cfeaba32da65ad40806be1e9ec37b4c64fcaa93f3ec7976f68acf23c42fdabf75819e888b97d0ead78df818df52638f80e90ea5cdac78
SSDEEP

768:RUWWDCtOtEkdbiSbwKwUYpaiVIMY+2H26w/KwNgLBuTmld42:KWWutgdbPkpkeIVH2/NqLBuIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdd0130a5bedfe39f2fa6899684282e8_JaffaCakes118

Files

fdd0130a5bedfe39f2fa6899684282e8_JaffaCakes118
.exe .ps1 windows:5 windows x86 arch:x86 polyglot

06fb367ca6e25fc1a0f68fb8e0f203bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

GlobalUnlock

shlwapi

PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
wnsprintfA
wnsprintfW
wvnsprintfW

user32

CloseWindowStation
DispatchMessageA
DrawIcon
EndDialog
ExitWindowsEx
FindWindowExA
GetClipboardData
GetCursorPos
GetDlgItem
PeekMessageA
SendMessageA
SetThreadDesktop
ToUnicode

Sections

.twrwn
Size: 38KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vafkf
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bkn
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ