dacc370df341eee683524057e9ef4b78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dacc370df341eee683524057e9ef4b78_JaffaCakes118
Size

53KB
MD5

dacc370df341eee683524057e9ef4b78
SHA1

b068abd35006fa00b8cfba981546fd04dd014fbd
SHA256

1b13dfa6647bc91eb0a0cffe4f1a1a5fbf7cef96c7493e76617843d6a729b521
SHA512

a70f91c19e738f1f92427faf1e1c26d8d73275685105d0bf91bfae1048205023138ec0699e9f2fc1e41c277102baeed23f66a5ef62cdac652f4db099bc35a03d
SSDEEP

768:br8e3l0gWnXXKk8XctysGDTlIG2cA4t6OULEoJQVuRCcHDSRl6hTqZ+tAntKfTqS:UOe6tIys0JI7za6OULZQHcHeCFtRbUO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dacc370df341eee683524057e9ef4b78_JaffaCakes118

Files

dacc370df341eee683524057e9ef4b78_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e231797069b7d8396632e1035fcffda2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
wnsprintfA
wnsprintfW
wvnsprintfA

user32

CharUpperW
CloseDesktop
DispatchMessageA
EndDialog
ExitWindowsEx
FindWindowExA
GetClassNameA
GetDlgItemTextA
GetKeyboardState
GetKeyState
GetWindowTextA
ToUnicode

Sections

.olaxyz
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lkput
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.roz
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ