2297ce8a67908d4c73d10c8e36627660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2297ce8a67908d4c73d10c8e36627660_JaffaCakes118
Size

418KB
MD5

2297ce8a67908d4c73d10c8e36627660
SHA1

89fa501ee9faca9b2de70dad800a7408dea79ca4
SHA256

11bd71fa2c1940823dd7aa02deb86901c69581a7f2847a7d97e1288efc0523e1
SHA512

48fed5a6c4103c114f256635531a5ca814d73bd684e7e27eee87dcb5620b946b9e22b55ff05b2433092f9bb2c432d80dc12ffdf921f2ef94174e975397785c18
SSDEEP

12288:/RFxLulDATxyuODbX8qSo/EJr5Qgag0BCaRY8Kn:5FxLNQukwq/Ar5K3BBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2297ce8a67908d4c73d10c8e36627660_JaffaCakes118

Files

2297ce8a67908d4c73d10c8e36627660_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5f09b735d5d84ce2ea267b0b16d433dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

InitializeCriticalSection

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wvnsprintfA
wvnsprintfW

user32

ExitWindowsEx
GetClassNameA
GetClipboardData
GetDlgItem
GetForegroundWindow
GetWindowLongA
GetWindowThreadProcessId
LoadCursorA
OpenDesktopA
PeekMessageA

Sections

.axgnsx
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.czgj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dct
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ