5e46885cd94806d1e2dbcf1351ce56bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e46885cd94806d1e2dbcf1351ce56bf_JaffaCakes118
Size

53KB
MD5

5e46885cd94806d1e2dbcf1351ce56bf
SHA1

917b2678c67fb1a5a4892796663a2b57917e92ed
SHA256

a2b51e6f35f0a89018c470557886244cfd0c8ba805bb2d75d5c1e726ce9ef70c
SHA512

bebaae1c00924954ba8cdbe07cb3e2439c3455f6c08e8b55134a54ed735794354652ad5b9bd181aa6f04d165fd278267e045d51b7ce27227d9e62ff070d70970
SSDEEP

768:XPjV51hl1U0KPFXL5+VQMEUuK+VO8gTm11rSvXvJQoLXgMDof80wPbQAE:XPB14l5P+uKntifosMDm7wPq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e46885cd94806d1e2dbcf1351ce56bf_JaffaCakes118

Files

5e46885cd94806d1e2dbcf1351ce56bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1272f883379c008e501a2c3b863068c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptCreateHash

kernel32

HeapReAlloc

shlwapi

PathFileExistsW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

EndDialog
GetClipboardData
GetCursorPos
GetForegroundWindow
GetKeyState
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
SendMessageA

Sections

.qpyvqz
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itgn
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.het
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ