a4f2a2880c47a87b173c494f9baeb29f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4f2a2880c47a87b173c494f9baeb29f_JaffaCakes118
Size

49KB
MD5

a4f2a2880c47a87b173c494f9baeb29f
SHA1

ab1132738b73e495535609354020b195e3f504b8
SHA256

92860184f25284f663478fd51763c67e9a84085c75790d4c24bb8c2b57b97e47
SHA512

6b6db1cbd06ddce7b3105522794ccc3f3079886f6946547d22162a08345146d04844dae7860c4b184d1deda4186396501590679113aa5e54c24b7e31a8b3aee2
SSDEEP

768:Ak/Rbm6XB2Yskc7NyxYz4Y1O5tizPI2FK+XY0S+G4iVEnH17XcG+GopZpymCD:Ak/RtB2YBcBsYtw5yNFKA3lVF+jZzG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4f2a2880c47a87b173c494f9baeb29f_JaffaCakes118

Files

a4f2a2880c47a87b173c494f9baeb29f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0e8a3c61e6e73132b3a4d2cf489422f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

kernel32

OpenMutexW

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
wvnsprintfW

user32

DispatchMessageA
GetClipboardData
GetDlgItem
GetDlgItemTextA
GetForegroundWindow
GetIconInfo
GetMessageA
GetWindowLongA
PeekMessageA
SetThreadDesktop
ToUnicode

Sections

.zur
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yzctoh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jap
Size: 6KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ