a621d1261dad876f315d7b364708d23a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a621d1261dad876f315d7b364708d23a_JaffaCakes118
Size

520KB
MD5

a621d1261dad876f315d7b364708d23a
SHA1

98e87d1333b6c177c2e8b6d1d4473c4100b3ac3f
SHA256

760725fe7c37aef6c8f02c9ec169e125e720aaa1dbae97f3646953f3f8e59870
SHA512

5a05b5c8252dea00f739cb8160516bf3890c84cfa43a9864b10d496798dab4adbc6d3193903261a80ec4863b256d36995db8ba1b815209bcbb7186847ad1759c
SSDEEP

12288:PNxPI4hFq2SRgIiEV+r4zPtrtMXW2c7dXJG1B4XdssRc7+L:vIGSC/IMGlRx5Gr4l9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a621d1261dad876f315d7b364708d23a_JaffaCakes118

Files

a621d1261dad876f315d7b364708d23a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a3bcce77d723720abd526d4114756161

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam

shlwapi

PathFindFileNameW
PathMatchSpecW
StrCmpNIA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
CharUpperW
CloseDesktop
DispatchMessageA
FindWindowExA
GetClassNameA
GetDlgItem
GetForegroundWindow
GetWindowThreadProcessId
OpenDesktopA
OpenWindowStationA
PeekMessageA
SetThreadDesktop

Sections

.bcvul
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sjsdqf
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lex
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ