bbaf7af3b3e60e4bf98a8e47d8da5acb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbaf7af3b3e60e4bf98a8e47d8da5acb_JaffaCakes118
Size

51KB
MD5

bbaf7af3b3e60e4bf98a8e47d8da5acb
SHA1

f50860ce812f7feb285b5dce6ce19ce775e2e8bb
SHA256

e7a8e1a5ed0a4e7bd2838f1325f4e4ef4b38a52c0f4f3337b5a386154c5d1cb3
SHA512

64b7b276a0822fa21897bc1a2d856987a33ba2991c8a7cb0f21ed23043ae150cf1874ecb4faac1ea1ebf54c6b23b82602393e9a3cb5b2d92d53b0cbd4f4a61c0
SSDEEP

1536:7YyTI+SVa+iq7FW4PBxhKnwXF2xQMVwSSC:7TNejiaFW4PBxhVXFmQMVGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbaf7af3b3e60e4bf98a8e47d8da5acb_JaffaCakes118

Files

bbaf7af3b3e60e4bf98a8e47d8da5acb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0561c9189dac287d6c18e2f0a8a9d364

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrW
StrCmpNIW
wnsprintfA
PathCombineW
SHDeleteKeyA
PathRemoveFileSpecW
wvnsprintfA
wvnsprintfW
StrCmpNIA
PathMatchSpecW

advapi32

GetUserNameW
CryptAcquireContextW
CryptDestroyHash
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
DuplicateTokenEx
CryptCreateHash

kernel32

GetSystemTimeAsFileTime

Sections

.ezgvun
Size: 41KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdopud
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cvelex
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ