aaabfcbc59aa7147b499b7a5b872fef1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaabfcbc59aa7147b499b7a5b872fef1_JaffaCakes118
Size

50KB
MD5

aaabfcbc59aa7147b499b7a5b872fef1
SHA1

55cf0c6dea7b07a235bdc74a6a36686d10758ef9
SHA256

0962dae9a1637513293bb64c7ea0c186c4f72614c0c75e56fc0ab6bb5b39651c
SHA512

20e2f42cc280d33da177d5852525bd5a03162e63e1e80cf147bdcafb456073206622004cb4e313295d9b48083aa096196769e22184b9a730d40572cfd799c304
SSDEEP

1536:P8OXcE29YLsW12r21bwpXPVe7am52Eu0rh:P8tmQ/iBGXYx2x0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaabfcbc59aa7147b499b7a5b872fef1_JaffaCakes118

Files

aaabfcbc59aa7147b499b7a5b872fef1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4a881485fdf9fab7566b308e7cec0c79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

kernel32

GetModuleFileNameW

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfW

user32

GetDlgItem
GetDlgItemTextA
GetIconInfo
GetKeyState
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
PeekMessageA
SetProcessWindowStation
ToUnicode

Sections

.ifgj
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hqxat
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmr
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ