c047dabfc0b96499be3762eade18cfeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c047dabfc0b96499be3762eade18cfeb_JaffaCakes118
Size

45KB
MD5

c047dabfc0b96499be3762eade18cfeb
SHA1

9c33769f519f47adc5680147968786aa3ac9607b
SHA256

9efbdb1226c64d336977fe5e86f22e53dc3a052e2f47f68b044f7a499cd53d22
SHA512

6bc4e674b07e9f6f12b32e4b28ec93990b02f3851fee784de121b246f916bc96d19952c40e38fff63397df6c806ac15b0e050dd55bb15da1adc57492a4de45bd
SSDEEP

768:SSRUUeJ+z+hTazRj5g0pccDiU21vuvEkTJItQE3kIQNtckZU:TRneJAJzXecDexmEmUQEUvNiv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c047dabfc0b96499be3762eade18cfeb_JaffaCakes118

Files

c047dabfc0b96499be3762eade18cfeb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3438d17dfadc98b74fc5ac29dc8c43c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathMatchSpecW
wvnsprintfW
PathFindFileNameW
StrCmpNIW
wnsprintfW
wnsprintfA
wvnsprintfA
SHDeleteKeyA
PathCombineW
StrStrW
StrCmpNIA
PathRemoveFileSpecW

advapi32

RegCloseKey
RegDeleteValueA
CryptGetHashParam
DuplicateTokenEx
RegQueryValueExA
CryptReleaseContext
CryptCreateHash

Sections

.xubmf
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxyxyb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wvopol
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ