82768668129f931b7fd892174c2dd4f2_JaffaCakes118 | Triage

Sharing

General

Target

82768668129f931b7fd892174c2dd4f2_JaffaCakes118
Size

50KB
MD5

82768668129f931b7fd892174c2dd4f2
SHA1

66309ed1bd17a4f75c12deaa00eb3987f9b21beb
SHA256

85d8b8c9863833097b4d679e4aa799ed5ddb84565e6c281603a21d6f71c06a1c
SHA512

f6e28abc3f46d0ab136000b25209564061d4c9cb37c623370d5f371cd3e7a5a724dbf0abfa7d318597f622eb90604bf3fdcac61a6ae6f7082f6d211ffb840eaf
SSDEEP

1536:vZeQMgubxGNdo8G+VM7/D9SQ0WGVi8wLRM:BemcGxxM7/RSQ0WGV75

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82768668129f931b7fd892174c2dd4f2_JaffaCakes118

Files

82768668129f931b7fd892174c2dd4f2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

96616ec5ed1f0dc38c8446a7f3956564

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathFindFileNameW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharUpperA
CloseDesktop
GetCursorPos
GetDlgItemTextA
GetForegroundWindow
GetIconInfo
GetKeyboardState
GetMessageA
GetWindowLongA
OpenWindowStationA
SendMessageA

Sections

.avejip
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qrwn
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hwlap
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ