0e79fd4fbc549ccc07f6447c370b6f4e_JaffaCakes118 | Triage

Sharing

General

Target

0e79fd4fbc549ccc07f6447c370b6f4e_JaffaCakes118
Size

186KB
MD5

0e79fd4fbc549ccc07f6447c370b6f4e
SHA1

a6d035c1f6b2a4beb20cf4cb15bc4fa5c226da60
SHA256

513d924ba29032ebf93520e996bd0d70e1b77f2ad5110a736df3906546f960b7
SHA512

bc2ebce81332c2f47853a506a90c4ff3143bbc5ac938a056a3f514206619aa242573689db32984daf8ad53f10ad86df4e8272ad46e3e19f7f2937e951ff19588
SSDEEP

3072:X2OJOxz1jLnngqIorL84VDQJanT7fuKumWuFF0QNtBdmCOKLJFy1un7Ry:X4x9nngqIL4VDL+uTnNsqjy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e79fd4fbc549ccc07f6447c370b6f4e_JaffaCakes118

Files

0e79fd4fbc549ccc07f6447c370b6f4e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

853156e53047052282397701fd81476b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\JTygZVhoh\NjpWgyAUCm\yeoncPc.pdb

Imports

kernel32

HeapAlloc
MapViewOfFile
RemoveDirectoryW
CreateDirectoryA
SetEvent
GetPrivateProfileIntA
SetThreadLocale
CreateDirectoryW
lstrlenA
MoveFileExW
GetProfileIntW

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

FillRgn

Exports

Exports

?SuperFunctionCall@@YGKXZ

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug01
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ