ad11ec14ace5f76d7b659820f2042d87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad11ec14ace5f76d7b659820f2042d87_JaffaCakes118
Size

52KB
MD5

ad11ec14ace5f76d7b659820f2042d87
SHA1

02658f5598638d18f36d0b6ca4b707b5446b4586
SHA256

4900687d34c8142b621125510884005ca47c6968e69ac8ed5f9953351d41e979
SHA512

ad7e34830ee67fc7cc31e8a05f4035f9ed5fe997dd135bce0ad70ffa1e82cb317c800b4f95c5a2d65b3f71e05be4609048eec80ec721cb2829e4d5d5fc9ea154
SSDEEP

768:v8WDiwoFYCXbkDf3pAqVQdEbcRTzJKLFhp0/zR2wWkiwHfKoRqI1XBLRF+:kBZFY4YfpAqVQOARPJKPT8fEI1Xv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad11ec14ace5f76d7b659820f2042d87_JaffaCakes118

Files

ad11ec14ace5f76d7b659820f2042d87_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8b4bbe6557f92171fddea4d565334ebd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

GetLocalTime

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
DispatchMessageA
DrawIcon
EndDialog
GetClassNameA
GetClipboardData
GetIconInfo
GetMessageA
GetWindowLongA
GetWindowTextA
PeekMessageA

Sections

.fun
Size: 42KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kfin
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pon
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ