b6315302bf136493eb453689a273df3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6315302bf136493eb453689a273df3d_JaffaCakes118
Size

50KB
MD5

b6315302bf136493eb453689a273df3d
SHA1

38419ad6170dbdcd2de1f155d47f95c8c66af5d2
SHA256

b94ab68bf4e77d9ce6b40edeb0531a51bd30505ffa1d95192317dd19599ffdc9
SHA512

bbc609f7f722821d21420fefd8a51b022e35cc59eed04e6485ba202e80f55d6ceef8692b1b8120f593bfb0cde6f930bff19dcd56d3058f288cd7acee22b492c8
SSDEEP

768:Mio3Y2relD/c/s3ih860sVJRkN99DAlo46NHobZVrZVr7:Mit/r3i5vRkN9NNOVrZVr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6315302bf136493eb453689a273df3d_JaffaCakes118

Files

b6315302bf136493eb453689a273df3d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b99c65511d217df60ec3e98b3135b9f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharUpperW
DrawIcon
EndDialog
ExitWindowsEx
FindWindowExA
GetDlgItem
GetDlgItemTextA
GetWindowTextA
MsgWaitForMultipleObjects
OpenDesktopA
OpenWindowStationA
SetThreadDesktop
ToUnicode

Sections

.ahszqf
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hspwr
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dwt
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ