df39a3d5e914af53f16716ede5f91a9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df39a3d5e914af53f16716ede5f91a9f_JaffaCakes118
Size

53KB
MD5

df39a3d5e914af53f16716ede5f91a9f
SHA1

2d3b72a612089c042c2ddeb58f7dde9805cb8753
SHA256

dbb82d0334d758a045c730afc434b1afbb4ba5e5f2405ab0ef5b21e39464cda5
SHA512

7812579e32a8106578b66e421aaf825792ae4be0d51a236e7aad1dc7728ba487ec4e00f5746bb8031c3c106f644282b9e5375840d9b04d3121984befec6339cc
SSDEEP

768:3dYwplnAb/lEKuWxDGbaHzJz7sUJkgPRFzKlfC9o3pkpWZBj14:rxeETVaHyUJ97zKlf9pRBR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df39a3d5e914af53f16716ede5f91a9f_JaffaCakes118

Files

df39a3d5e914af53f16716ede5f91a9f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

782539203f007d11e3c1a1e5d54ccc67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA
wvnsprintfW

user32

DispatchMessageA
EndDialog
GetClassNameA
GetClipboardData
GetCursorPos
GetKeyState
LoadCursorA
MsgWaitForMultipleObjects
OpenWindowStationA

Sections

.whibul
Size: 43KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.laj
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bufot
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ