8520dd955910863f13a98ec82a4e4c4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8520dd955910863f13a98ec82a4e4c4b_JaffaCakes118
Size

50KB
MD5

8520dd955910863f13a98ec82a4e4c4b
SHA1

828e9c49b2c040e392304a7e403882814d72a971
SHA256

306028a9dca5648a40dae1918090fb1b16fcb9fb71c07618ccb23ae7df399808
SHA512

9fb2d67a8d12f185d14e0ad9bbb0cbf92e3380c9a52d396fc0fe0c26f88fa97fd412e2ebbc0fdefcbe343109e4b4c910d2ab401ccbce184362d1ed9e2125c893
SSDEEP

1536:cDpB522UNEczhDE65nppAvXQfoKzRhaG:cDpB52RNxhrDAvgfaG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8520dd955910863f13a98ec82a4e4c4b_JaffaCakes118

Files

8520dd955910863f13a98ec82a4e4c4b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5febc710790290ec967ae34a5dc45c4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

CloseHandle

shlwapi

PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA

user32

CloseDesktop
DispatchMessageA
FindWindowExA
GetClassNameA
GetWindowLongA
GetWindowTextA
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
SetThreadDesktop

Sections

.ncd
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xurir
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dohyf
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ