b24eb83d4495297281c36c28491beb17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b24eb83d4495297281c36c28491beb17_JaffaCakes118
Size

50KB
MD5

b24eb83d4495297281c36c28491beb17
SHA1

fcb3f1be13b7f23c6dd7f699dcb4a8b97a17b5d9
SHA256

502622e196dbc6201cfe6c00e9131c8016ebf4d8ec23bea3e833b459413614f0
SHA512

5ec35b341f8d5dc59604aee68fc8ef17bfe728cc965f47e97ab08ff40fc556b5fb3da7af1278e3a50922a00c9bcdb3576f1a464e50a4e33a45b39cf158d81a8c
SSDEEP

1536:ODpB522UNEczhDE65nppAvXQfoKzRhaG:ODpB52RNxhrDAvgfaG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b24eb83d4495297281c36c28491beb17_JaffaCakes118

Files

b24eb83d4495297281c36c28491beb17_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5febc710790290ec967ae34a5dc45c4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

CloseHandle

shlwapi

PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA

user32

CloseDesktop
DispatchMessageA
FindWindowExA
GetClassNameA
GetWindowLongA
GetWindowTextA
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
SetThreadDesktop

Sections

.ncd
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xurir
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dohyf
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ