59eb3e1a0198e6ce914dd651f8d1ccc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59eb3e1a0198e6ce914dd651f8d1ccc6_JaffaCakes118
Size

50KB
MD5

59eb3e1a0198e6ce914dd651f8d1ccc6
SHA1

0811942d76b3e42ed256baee66ccd789a2080ab4
SHA256

e322d0d92e0fcbec26639d16eb2858263515099393bd8d278c27325f25ef9536
SHA512

a568e99b19fd3bf3cbf4b879b828b06e5a9a1df830785a5135daf62c15aa062bcfd37c592143aeb6589f0516f6c0fb4f60b1028f523a392a88b354b07c79c435
SSDEEP

1536:W2ca8nBUGxUMDqjZ0bwg3ugLJmzxjnIkElGx6:W2enq/vV0suuQcdnF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59eb3e1a0198e6ce914dd651f8d1ccc6_JaffaCakes118

Files

59eb3e1a0198e6ce914dd651f8d1ccc6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b6664d98a01262750f61aad332363e49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

kernel32

GetUserDefaultUILanguage

shlwapi

PathFileExistsW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

EndDialog
ExitWindowsEx
FindWindowExA
GetClassNameA
GetForegroundWindow
GetKeyState
GetWindowThreadProcessId
OpenDesktopA
SendMessageA
SetProcessWindowStation
SetThreadDesktop

Sections

.wfgr
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cxyroj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jst
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ