8cef03be5a263f3db19e9e02adeaa813_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cef03be5a263f3db19e9e02adeaa813_JaffaCakes118
Size

660KB
MD5

8cef03be5a263f3db19e9e02adeaa813
SHA1

fd31846e54778e9740e6d9f92c7c8c838b712dc5
SHA256

ca6728d607d918a6a5fee15cd6086bb0982f35028f4f9568ca3c9389e7e6d80e
SHA512

d4a28bb775ce1049693d5938cc6d5f7ba40dcae4437cb6aa70de24a4f17518700958feaeee53e1fca00366c10ee0b698cc3e3849be5cb88e64dd0ff0884ade5a
SSDEEP

12288:sv5R3p0KJpH+OMIl48ktzBPHEWqNlD2VGF7gdLtRWePeZ:sv7Nv348k/Hq3aVcYLO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cef03be5a263f3db19e9e02adeaa813_JaffaCakes118

Files

8cef03be5a263f3db19e9e02adeaa813_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0d5e4530be302d50373b800ebb041601

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

GetUserDefaultUILanguage

shlwapi

PathCombineW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfW

user32

CloseWindowStation
EndDialog
ExitWindowsEx
GetClipboardData
GetDlgItemTextA
GetKeyboardState
GetKeyState
GetWindowThreadProcessId
PeekMessageA
SetProcessWindowStation
ToUnicode

Sections

.odytov
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.whatmh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vub
Size: 6KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ