54d6c343fdf127cae89d40bbed8d82d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54d6c343fdf127cae89d40bbed8d82d0_JaffaCakes118
Size

192KB
MD5

54d6c343fdf127cae89d40bbed8d82d0
SHA1

91994247e55aa6136326af5fb4c95b4d1424c185
SHA256

e54608c1dc566294f9bc33d5d262f0762f829a8a2d1f6aae9244e98cb81aaa3b
SHA512

6a9cb1c27234b071d20b8e1993420fb9751930c6abe80a1a55f91b14a25e35a682b03b021cc48ee8353ef112a3d93b9102bbf616cff54d70f99719ce7cdcd037
SSDEEP

3072:cvSPk4GP9vsoSaju6Qrjldlf2/G0kdVkuvuzJ2J3ke+bgfwv/xDw2j2ATVEnl:wZvTCzPlrexmVdNJ3krawv/xD5Pq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54d6c343fdf127cae89d40bbed8d82d0_JaffaCakes118

Files

54d6c343fdf127cae89d40bbed8d82d0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1b52c2d4d3a540d0a2193938c9f18867

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsUNCA

kernel32

LocalAlloc

user32

VkKeyScanW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rt_ecx
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_eax
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_esp
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_edx
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_ebx
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ