6792a815c6aea7c4e8479ae221ac9df7_JaffaCakes118 | Triage

Sharing

General

Target

6792a815c6aea7c4e8479ae221ac9df7_JaffaCakes118
Size

105KB
MD5

6792a815c6aea7c4e8479ae221ac9df7
SHA1

b7b94d7c4258f1cc67f74dc8fd6ebb66452f5644
SHA256

c1d2d04f6656c47f07387771e4f818a6fec15c8378369c468ec96ab54c0edf6c
SHA512

73bc88de73bc9f95bf6957b94b5791abe6604a7439787483ae63631e0daa226e4e85444c3c9b6d08c82991226bc9fd1c123e237eb4a3b574dab46beafb5d87ee
SSDEEP

1536:MTiku71i/el9h+K00GFHs96cZI3OshDvIYntymcw/h6x8Doh+mVV7bS+yy:MmLKuf0vlsU6UZv3ymcw/MxLhn7bS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6792a815c6aea7c4e8479ae221ac9df7_JaffaCakes118

Files

6792a815c6aea7c4e8479ae221ac9df7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d2f3c92c448d3323c43ea0452439fbc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PtInRect
GetForegroundWindow
GetActiveWindow

kernel32

lstrcpynW

shlwapi

UrlIsW
PathGetDriveNumberA

Exports

Exports

HighWaySeE
?MathInductField@@YG_JEPAXUmno284720984202747@@WE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zero
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.one
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ