dc6c384339d21969c1038934cf7e7b09_JaffaCakes118 | Triage

Sharing

General

Target

dc6c384339d21969c1038934cf7e7b09_JaffaCakes118
Size

62KB
MD5

dc6c384339d21969c1038934cf7e7b09
SHA1

ba35d9197543ba8cee39e307b6c0f3d5f5baaf1c
SHA256

6f78a5bcd760bc46c0d5fd038d11bc45cde5f0fbaf9b16eb925e9efae116a9f1
SHA512

e7abbff14925707b84443ef1b9962900321b168aa35e140c897f735ca1af20ac5d1f7f94137503a56cf9a5d323ef3232f90966ce1d449a2e068f56de70606214
SSDEEP

768:ubOTHfDI+0PjZ0MEVO/DuKitckWHu56xp6Gt5cB6thGOvdwLv+5Vt2IrkAP+2Tic:JbIxjZ0W/Du5tr2Y6G+pVjkW+Uic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc6c384339d21969c1038934cf7e7b09_JaffaCakes118

Files

dc6c384339d21969c1038934cf7e7b09_JaffaCakes118
.exe windows:5 windows x86 arch:x86

603e10226593d32e53da41315f478b4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptAcquireContextW
GetUserNameW
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA

shlwapi

PathCombineW
StrCmpNIA
StrCmpNIW
wnsprintfA
wvnsprintfW

user32

DispatchMessageA
DrawIcon
FindWindowExA
GetWindowTextA
LoadCursorA
MsgWaitForMultipleObjects
OpenDesktopA
PeekMessageA
SendMessageA
SetMenuItemInfoW
ToUnicode

Sections

.diryn
Size: 42KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xifwb
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zah
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ