02e1a2db042879033938778ef95d3e9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e1a2db042879033938778ef95d3e9d_JaffaCakes118
Size

243KB
MD5

02e1a2db042879033938778ef95d3e9d
SHA1

109594736d73012b218d2893934ecf9f4a32a48f
SHA256

94db2b706707b8116b5962fcdc2c15f3223e9c4159bc72c2190f516d4ad9705d
SHA512

ed3712b9bee46c0f02affe74334773fc17a213214e4b91e1b79396c51268d40fc2d633536109cc31e962662477e3635ac868a49dc32e4719cfc94d3e2e1ed62e
SSDEEP

6144:Je2e91qhyg2LUheybf88b4+OKZ7N0r/U/CYMysT:JzePqhydoheKf88bjZRxwT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e1a2db042879033938778ef95d3e9d_JaffaCakes118

Files

02e1a2db042879033938778ef95d3e9d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

752654819bfb490d799eb561ea803cd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
CloseWindowStation
DispatchMessageA
GetClassNameA
GetForegroundWindow
GetIconInfo
GetMessageA
MsgWaitForMultipleObjects
SendMessageA
SetThreadDesktop

Sections

.psl
Size: 42KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fux
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fmfmn
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ