6f08e98ea4d29f719a7213b6ce0e5d00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f08e98ea4d29f719a7213b6ce0e5d00_JaffaCakes118
Size

51KB
MD5

6f08e98ea4d29f719a7213b6ce0e5d00
SHA1

1c38e3c8490016bbb4ad80fe3415c36eb5f31e45
SHA256

dc37eff028f8fcc0f01441d36dfc3e211e06d0e99c21d9a43b98a73be6a062f5
SHA512

bd4d5a28d303edfb5cb7e1358b1899c3cea9a13eeb76402db9129ef2762d5216e02cebe75c495a8f36250fdc8f32c891a435ae7c5b3d7e5d24a9e48ec1d05d55
SSDEEP

1536:s9QkQ0lHoJEq54mcp/d8nMvGxNohcTb2Dy:klHoLcp/d8iDhcTb2Dy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f08e98ea4d29f719a7213b6ce0e5d00_JaffaCakes118

Files

6f08e98ea4d29f719a7213b6ce0e5d00_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d95eaa087ef4380de778b92e3303113c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpNIA
PathFindFileNameW
PathFileExistsW
SHDeleteKeyA
wvnsprintfA
wnsprintfW
PathMatchSpecW
wnsprintfA
wvnsprintfW

kernel32

WaitForSingleObject

advapi32

RegEnumKeyExA
RegCreateKeyExA
RegCloseKey
DuplicateTokenEx
RegSetValueExA
RegQueryValueExA
CryptReleaseContext
RegDeleteValueA
CryptDestroyHash
CryptAcquireContextW
GetUserNameW

Sections

.vwxaf
Size: 41KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.psvwp
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtoj
Size: 6KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ