5bc62702bf133ba361e65f71bdbe14b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bc62702bf133ba361e65f71bdbe14b0_JaffaCakes118
Size

648KB
MD5

5bc62702bf133ba361e65f71bdbe14b0
SHA1

73706e4016975e0e9910923b3d9d661aef294782
SHA256

340c654eaa9cc5601a5b15f675b86a9028e19b025c4f31d2068ae1d8267dadbb
SHA512

0a237484114cdb67a19ae9c4bb3032cf7c0e0ac8eb8d8ab7b69a78721cfec5644d1617030730cc451c976d85d1e4116b35bbed4b9580b9777bb3e984f869b5a8
SSDEEP

12288:8lE0wp5U2XSvYxa9/veJf+AAr6bsZ+iyur3ZNHVqB1eWrd9+JhNZ:+EV7SQAZWJf+ANbsZ+iyaZNHW1e9hNZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bc62702bf133ba361e65f71bdbe14b0_JaffaCakes118

Files

5bc62702bf133ba361e65f71bdbe14b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

32f5c2241d5b715f5944c659b6de012c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DuplicateTokenEx

kernel32

GetModuleFileNameW

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
wvnsprintfW

user32

CloseDesktop
DrawIcon
EndDialog
ExitWindowsEx
GetClassNameA
GetCursorPos
GetIconInfo
GetWindowLongA
LoadCursorA
MsgWaitForMultipleObjects
PeekMessageA

Sections

.jab
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hqp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fgj
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ