8ecd5d5581315df602fbb96a4924e3bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ecd5d5581315df602fbb96a4924e3bb_JaffaCakes118
Size

50KB
MD5

8ecd5d5581315df602fbb96a4924e3bb
SHA1

a2a293a52afe6fe75b3c71f48d5bfcb55b718958
SHA256

338ea153211b343ba85e8fd7bdbfdcb833075189751fdc813f1e32b8212a96f9
SHA512

5472902f02ba40ab618b06cb15a5388a09c2c0b3d17e2d36bbb23e61e11fc60552d9b0346f236df055ee48d42dacb864674f06402de57ea7b4c212099c2689f7
SSDEEP

768:KfOYevAJINA2UtntymiQ09uVwaOchyaenSubdDgWHUgZLBWZb36uhiixE6Xd:Q+AJcUoQmuVOFaeJj3LBWZ36uhiiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ecd5d5581315df602fbb96a4924e3bb_JaffaCakes118

Files

8ecd5d5581315df602fbb96a4924e3bb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

403d3911a29e755be8ef48fc3d971068

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

CreateThread

shlwapi

PathCombineW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrStrW
wnsprintfA
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
CloseWindowStation
DrawIcon
GetCursorPos
GetForegroundWindow
GetWindowLongA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA

Sections

.ivil
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zmdkj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jwt
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ