64acb7086bafaf2bbce858f6f8b2f282_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64acb7086bafaf2bbce858f6f8b2f282_JaffaCakes118
Size

53KB
MD5

64acb7086bafaf2bbce858f6f8b2f282
SHA1

14600e43605eb3263cee2db65842595dbbf29652
SHA256

fc132b57090f231932c46acb3f0b08da94e0b85e77ed23ed408a3679c5aa86fc
SHA512

f3170ecbc000b83592a97762914e31433522da1f76ac319fca9b383fabda0f0682ec73cfed54de8ccd8dda7c9e0ee3d20ddfe8580ea60dd3f476dfca115cf5c9
SSDEEP

768:CnD3To5vyOr51UTWboCe0+zzi9WKoUg4thRtjfdmdvq/PiF37+RP2pWhH:aD3cTrvUC+cPgm3CqHWiR7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64acb7086bafaf2bbce858f6f8b2f282_JaffaCakes118

Files

64acb7086bafaf2bbce858f6f8b2f282_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdd68270bb5c347496d8523a2be302c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

CreateProcessW

shlwapi

PathCombineW
PathFileExistsW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA

user32

CloseDesktop
DispatchMessageA
GetCursorPos
GetDlgItem
GetKeyboardState
GetKeyState
GetWindowTextA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
OpenWindowStationA
SendMessageA

Sections

.rkpmh
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fit
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dov
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ