de6bbb4e5ab0d86bb6ffa128d7100e00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de6bbb4e5ab0d86bb6ffa128d7100e00_JaffaCakes118
Size

52KB
MD5

de6bbb4e5ab0d86bb6ffa128d7100e00
SHA1

9ada70bc66722889dd73dec69d634d9fc3c43372
SHA256

d05913c8d1b7ea4b77af243a7cbd33806ac72d2c0fceb2b30e1eb7ec68a5d9ca
SHA512

74ad637ea431df665b9450699a71156b63374765aa6195f1c7585a3ca0f06a2eef564fecef11a18a2c61f68dffed8f72620e2d44a9a11308092e1711a00da422
SSDEEP

1536:x6v3mSZWIvSEulocAhbQrGx/fwYHTmAfGHjZ9xaekFt:0v3FWtloPZ1fwYzm996P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de6bbb4e5ab0d86bb6ffa128d7100e00_JaffaCakes118

Files

de6bbb4e5ab0d86bb6ffa128d7100e00_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4cabebd5ecc0282ed391afbc2b24b708

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext

kernel32

ReleaseMutex

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
CloseDesktop
DispatchMessageA
GetClipboardData
GetDlgItemTextA
GetIconInfo
GetWindowLongA
GetWindowTextA
PeekMessageA
SendMessageA

Sections

.fsn
Size: 42KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cnuxwl
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ngl
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ