0727594b27aed05d3bc7eff72314ef55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0727594b27aed05d3bc7eff72314ef55_JaffaCakes118
Size

172KB
MD5

0727594b27aed05d3bc7eff72314ef55
SHA1

6a240ee2df53c16fe28ba44d79440191166bbf4c
SHA256

8ff2c9136e419da3a5c04f9255f687603dfafa6c8bf6a7532e61a8e0cfe39024
SHA512

7ba6a96fb7546d70ffa63549b8f6f8dc7e2c6025abb1beb94021432fe592d884a6f60fac16b381a767ec7da7681b19d0b1bdb903c33b0928abb39eac17ffc31e
SSDEEP

3072:KtiKCNwoWBkoz6XapG3kU7u4h5u8cNJNlNYRVugO4zGLbVOOAiHlsAlRwk1Ko:WiKIwoWBNz6XapG3t7v5oNJNlNYRVCvq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0727594b27aed05d3bc7eff72314ef55_JaffaCakes118

Files

0727594b27aed05d3bc7eff72314ef55_JaffaCakes118
.exe windows:5 windows x86 arch:x86

318b8d1729da92d70d89aecb8435b3e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\WsWdlaAlmp\bbXyyUv\nKdvTcglwG\QcwhaaYMscAds.pdb

Imports

kernel32

SetTimerQueueTimer
GetTimeFormatA
GetStartupInfoA
GetStdHandle
GetModuleHandleA
CloseHandle
GetThreadTimes

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

ShowCursor
SetCursorPos
GetFocus
MessageBeep
IsWindowUnicode
IsWindow
GetTopWindow
GetClientRect
OffsetRect

ntdll

RtlCompareMemory

Exports

Exports

?InsertFil

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fxc
Size: - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fx
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ