01ec60e3ff22d11b18e749d6efc5eee7_JaffaCakes118 | Triage

Sharing

General

Target

01ec60e3ff22d11b18e749d6efc5eee7_JaffaCakes118
Size

169KB
MD5

01ec60e3ff22d11b18e749d6efc5eee7
SHA1

ece4ce8b30e219186ac5f98f57c0f753f8044178
SHA256

c49ec15ffd3c8e4ef6413918b2f09da39c71e32c49e7fdc6161359f5dd787c69
SHA512

39ddaedd2d1f437a87cc4785e39f28306e7ffb1a0ae32d2566f5d18936110aa7aac1389cb8e707cad12076aaf072f6681c42f49ffd6a173aa67fab51fc9d40d2
SSDEEP

3072:j1N1vA2Wu8mKyrecLLAZYcRwBjZnrlAWGvXGhHXVewgA8QmiT/MngNv:ZA2WuBDLqYcRANrlAWXQm/kOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ec60e3ff22d11b18e749d6efc5eee7_JaffaCakes118

Files

01ec60e3ff22d11b18e749d6efc5eee7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ca4a9c4d91429eee005cc1d0035a7e3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\mgresmecz\yStnQAeNKzSwE\iuQkzrgmj\ItbihvWjlEjf.pdb

Imports

kernel32

GetHandleInformation
GetFullPathNameW
GetModuleFileNameW
CreateWaitableTimerA
HeapWalk
HeapUnlock
SetThreadAffinityMask
GetACP
GetProfileIntW

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

FillRgn
DeleteObject
AddFontResourceW
CreateRectRgn

Exports

Exports

?MyDataFunc@@YGKXZ

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug01
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ