edcaa7d97bf413c3cc22b34ee9529552_JaffaCakes118 | Triage

Sharing

General

Target

edcaa7d97bf413c3cc22b34ee9529552_JaffaCakes118
Size

483KB
MD5

edcaa7d97bf413c3cc22b34ee9529552
SHA1

2d7ab0717a0dd8c9faaae628cbcbdbc3d2403a5e
SHA256

dda1e7ddf5df35adad3de496a3f2b1b2b34ac8fa9475ee1a18147191eb4d7f36
SHA512

2dcf0bf7e1762d214afa49d4cc60f7f8da18ace47409a26fab5abc8cc75375d203833510df9bc1a33b358861beca17afb3dcf5b3bba245a2797107ecc416112a
SSDEEP

12288:Aap9RLSUwquw9My8YE9MCC+4gVjFTcbOWSI6:Au9Rrnuw9MLjC+DPyU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edcaa7d97bf413c3cc22b34ee9529552_JaffaCakes118

Files

edcaa7d97bf413c3cc22b34ee9529552_JaffaCakes118
.exe windows:5 windows x86 arch:x86

279c787d3b659290fa36e6ff90b0c039

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptAcquireContextW
CryptDestroyHash
CryptHashData
GetUserNameW
RegCreateKeyExA
RegSetValueExA

shlwapi

PathCombineW
PathFindFileNameW
StrCmpNIW
wnsprintfA

user32

DispatchMessageA
DrawIcon
EndDialog
ExitWindowsEx
GetCursorPos
GetIconInfo
GetMessageA
GetWindowLongA
GetWindowThreadProcessId
PeekMessageA
SetMenuItemInfoW
SetProcessWindowStation

Sections

.atul
Size: 42KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tunyv
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xmp
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ