89f70132d2e88485a8f612164fd0b608_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89f70132d2e88485a8f612164fd0b608_JaffaCakes118
Size

50KB
MD5

89f70132d2e88485a8f612164fd0b608
SHA1

6dd8dde292ad6942f921b3e845c97b40b17b5af6
SHA256

b1306541a708bea244d29ef9310b7880b2c78109ae484121830df6cd3a3c5be2
SHA512

acee5898796079422643edf008e35f2b6af40b97557ac1e984d9cf9f0d7c2a43817a8d507a9bfcba6e2e77ccc81032434d35155ed3e3fa3815e6e0c9814d8978
SSDEEP

1536:t4OiL3aOXfkFdHsz+MoGtSTOzLo+YRSadznF:t4FL3RcFyz+Mvt+WHYRhnF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89f70132d2e88485a8f612164fd0b608_JaffaCakes118

Files

89f70132d2e88485a8f612164fd0b608_JaffaCakes118
.exe windows:5 windows x86 arch:x86

92edf63b732f2c6323a4adf8dad51bf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegQueryValueExA

kernel32

lstrcmpiA

shlwapi

PathFileExistsW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW

user32

CharUpperW
DrawIcon
GetCursorPos
GetDlgItemTextA
GetIconInfo
GetKeyState
GetWindowTextA
OpenDesktopA
OpenWindowStationA
PeekMessageA
SetProcessWindowStation

Sections

.tad
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vqnsb
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pml
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ