aed33ba947ada33ea82693412696ee5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aed33ba947ada33ea82693412696ee5d_JaffaCakes118
Size

247KB
MD5

aed33ba947ada33ea82693412696ee5d
SHA1

01cae050137c8cfbe013865c3ac452124aa6aec1
SHA256

b1bf780004fbe3488f5128eb64d44025372f25b8756f46550692f43da7fe31cd
SHA512

b2cd3c97724a5c6451d5fa9c2b63787dd78e8bdcd4bb8a114bdfc86f1039f92b2f24bc4abc84967db7ea5c83e4a467e10545ed213f19516a6358e437f2957fe6
SSDEEP

6144:J51YUI/xpf0SV0jTEHKbkFrU6lP1u5e7+WBLJcTQ4vm:nI/xKHjTpkrNlcw7PBVQHvm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aed33ba947ada33ea82693412696ee5d_JaffaCakes118

Files

aed33ba947ada33ea82693412696ee5d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4b756658e97e4dab91236006bd52c6b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
SHDeleteKeyA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
DrawIcon
FindWindowExA
GetDlgItem
GetIconInfo
GetWindowTextA
PeekMessageA
SendMessageA
SetProcessWindowStation
SetThreadDesktop

Sections

.vqvqx
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ylsb
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rop
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ