c1b555e8e327d72c95a09b0600d2f597_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1b555e8e327d72c95a09b0600d2f597_JaffaCakes118
Size

159KB
MD5

c1b555e8e327d72c95a09b0600d2f597
SHA1

6d22c2fac74a6ad8ce0081c088a8cb1ac97ac7da
SHA256

f678283c32a887f0d3493bfc3090b7a267fa74f5152cffed140543e837693d23
SHA512

d77e44061cbde0e325bfd6fc428d7b9fe859f70cc57e2234a0fc6d9825aa2c36aa4df0ef1b2730c223ea6a645308d7d0d405077e1a2c58417adc374ddc1815d0
SSDEEP

3072:tzRmkbS9nyUd3kKItqZs32kJshx6VeNEqLjRpQ4GNKs7ONXJQ:xbS9yA3k5hJshxSYXftaO5JQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1b555e8e327d72c95a09b0600d2f597_JaffaCakes118

Files

c1b555e8e327d72c95a09b0600d2f597_JaffaCakes118
.exe windows:5 windows x86 arch:x86

66bbbd8b40a586837c9dfbf60d67bc19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount

shlwapi

PathCombineW
PathFileExistsW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA

user32

CharUpperW
DispatchMessageA
ExitWindowsEx
FindWindowExA
GetCursorPos
GetDlgItem
GetDlgItemTextA
GetIconInfo
GetKeyboardState
LoadCursorA
OpenDesktopA
SendMessageA

Sections

.zwp
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmjwb
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tsjwf
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ