335e4179d91a294b724c44f41766a03e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

335e4179d91a294b724c44f41766a03e_JaffaCakes118
Size

53KB
MD5

335e4179d91a294b724c44f41766a03e
SHA1

b5cb95f3b70037c6e15e8fcee560708c71482ea8
SHA256

d1cda65c7027238a969d1652b4960c75b078ca5cd136728790e9c42ce3b8acda
SHA512

7a04e48fa27f8b3b8ee28ab2fe19e1e9c2e3ff8ff9b7a6dda19cd76beddc04809dc9731520d035b0f8de2587b90f35cd66214d095fbbafadcbc0c9b0b20f4af1
SSDEEP

1536:V5MIt54IXem7svJbAJRxbTYkMeyhlQhhH/:Vd0Rm7LJ/TwL0f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
335e4179d91a294b724c44f41766a03e_JaffaCakes118

Files

335e4179d91a294b724c44f41766a03e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

80a8187ae9f5c6036ff0af8ce6c2f7c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam

kernel32

SetFileTime

shlwapi

PathCombineW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfW

user32

CharLowerBuffA
CloseDesktop
EndDialog
GetClipboardData
GetDlgItem
GetKeyState
GetWindowTextA
SetThreadDesktop
ToUnicode

Sections

.kxil
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.roh
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xwh
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ