8556a6978f158a4f0fbfc14b30953e20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8556a6978f158a4f0fbfc14b30953e20_JaffaCakes118
Size

48KB
MD5

8556a6978f158a4f0fbfc14b30953e20
SHA1

f415fc6eb47cc59d9e1d1ef28188da6be8081c70
SHA256

71b2b6b5dd2957d7c1a0c5fc61c8a2c45c16e22e623b789fc88b92a1e04ddd26
SHA512

5a8184708cda7b20ab101f486961039bc3ffbe46c0ddcdd39652f1d8e7f3ff894b0833499f9b63c7f41909a5e6f1af079337e5501995203232da39cdb8abddbe
SSDEEP

1536:Iz+9/T4wyJSv105EMHGU8u9aRz/ktEz5cYrJA:IUb4wUV55mU8u9gMtycYa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8556a6978f158a4f0fbfc14b30953e20_JaffaCakes118

Files

8556a6978f158a4f0fbfc14b30953e20_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a787ff3297ab54f55973b7a8132ef46e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseWindowStation
DrawIcon
GetClassNameA
GetClipboardData
GetDlgItem
GetForegroundWindow
GetKeyState
GetMessageA
GetWindowThreadProcessId
PeekMessageA

Sections

.udqxoj
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gtcrip
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hmtel
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ