8db80efe93c43b05e9ccb9a8942445d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8db80efe93c43b05e9ccb9a8942445d0_JaffaCakes118
Size

531KB
MD5

8db80efe93c43b05e9ccb9a8942445d0
SHA1

21802456644073962ee283504b642ed7e519d3b3
SHA256

a330d0e09107be5576211a2e71b5812abb63f8a3de5da10348871168953feb41
SHA512

fffa3dc548cd46572add9a9c8bad0e8b3e9300bd874bfd650063548b90a6ede46b31b6cc68b657b630307f1db49467c37c500b6dbc0d6137b8dd0440c5dcc6ad
SSDEEP

12288:Q0OiIcSELTzdq5w960pmcyUZVTTTjg2jgooaWn:xyD0TM56bLjjg20ooV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8db80efe93c43b05e9ccb9a8942445d0_JaffaCakes118

Files

8db80efe93c43b05e9ccb9a8942445d0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

34e95ac718c1277b61674b5232d664c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharUpperW
DrawIcon
EndDialog
GetClassNameA
GetIconInfo
GetKeyState
GetWindowTextA
LoadCursorA
OpenWindowStationA
SendMessageA
ToUnicode

Sections

.zit
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vin
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bez
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ