96497dc2ca4e206acad65fe0b38f3d49_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96497dc2ca4e206acad65fe0b38f3d49_JaffaCakes118
Size

46KB
MD5

96497dc2ca4e206acad65fe0b38f3d49
SHA1

00d2420cc396b30ef420366fa14210ff31852219
SHA256

3bf00a198c3ea5206a3d18f627b9a836e269b4f177fc415131e0f7d00d19e62c
SHA512

75e6f4ab7d3eac7a72f7e1a84bf6569b28a8f7724af245bbeebb51d4f3a64a7b8bb10de1be219c7feab528d0df7706294183b987e26718df768fa335dea78b95
SSDEEP

768:Z9aCfNa/KpZra2bCbS6rhixQFt3o7quedMUxUPIVX02yZ:Z99fN3gFflix60GMRSkJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96497dc2ca4e206acad65fe0b38f3d49_JaffaCakes118

Files

96497dc2ca4e206acad65fe0b38f3d49_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7e21f90b334f7c45687b49e238b2d2a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
CryptReleaseContext
RegQueryValueExA
RegDeleteValueA
DuplicateTokenEx
CryptCreateHash
CryptGetHashParam

shlwapi

SHDeleteKeyA
PathCombineW
PathMatchSpecW
wnsprintfA
PathFindFileNameW
StrCmpNIA
wvnsprintfA
wvnsprintfW
StrStrW
wnsprintfW
PathFileExistsW
PathRemoveFileSpecW
StrCmpNIW

Sections

.deb
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tcfsf
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vyxqj
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ