a6a6d4aff7da428b76927d843692c89f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6a6d4aff7da428b76927d843692c89f_JaffaCakes118
Size

50KB
MD5

a6a6d4aff7da428b76927d843692c89f
SHA1

33bb8c6f8d8f8b0409b36a17bcdee3ff83210bb7
SHA256

131c4c15eb77f555fac650984af3388938d719a8702ccedcd9cb503e0dfc31d0
SHA512

e72a535d3a2dde4c4664c006cac2b1088ac08c76cd9d8afeff0df7d4d393a2d08ef184a823b68b2feb67807432de93438ad81f7963894f9217d707a225d1ee55
SSDEEP

1536:eTTtxFuNk3AlcocAY97aqNtkkXkJuOlEz2OX/6:sBxFuN3lpc74zJusENX/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6a6d4aff7da428b76927d843692c89f_JaffaCakes118

Files

a6a6d4aff7da428b76927d843692c89f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c2f3cf8f8ba0da11d75f22ec3efbb66c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

lstrlenA

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
StrCmpNIA
wnsprintfA
wnsprintfW
wvnsprintfW

user32

CloseWindowStation
ExitWindowsEx
GetClassNameA
GetDlgItem
GetDlgItemTextA
GetIconInfo
GetKeyboardState
GetWindowTextA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
PeekMessageA
ToUnicode

Sections

.ijwn
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bmnah
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.der
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ