0edd57039ee11fac00e3d642debf7b8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0edd57039ee11fac00e3d642debf7b8e_JaffaCakes118
Size

186KB
MD5

0edd57039ee11fac00e3d642debf7b8e
SHA1

5ced432e7229f3fdcbcff700185c23a3756cf86b
SHA256

6724ce667888c4ff8ff5db92f95b3bdb343d35af1795257731b6d120c3b25215
SHA512

89de15664f83c363252442959fbe9f6258e59335fc92cf6fef86d9dc4678f7f9ebc831cb0cd573c4b09f87c64314fcd05cb86b1820a77098667a85d1cb345a90
SSDEEP

3072:a8FNydmc+487SaiJY68ScuES30QE46UHUEeSaYnJYUmhVx/Vd3BAj:aoNCzcy30qPsSaYJYUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0edd57039ee11fac00e3d642debf7b8e_JaffaCakes118

Files

0edd57039ee11fac00e3d642debf7b8e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eac860c7c959233981b6b388b2aa603c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\gxZmquwyi\vlngzOji\DvrAtQAmkc\xwlyhHxo\lljwSvXEiTfl.pdb

Imports

user32

ShowWindowAsync
IsMenu
SendMessageA
LoadBitmapA
mouse_event
PostThreadMessageA
GetMenuStringA
MessageBoxW
DefDlgProcA
IsZoomed
ClipCursor
DrawIcon
MapVirtualKeyA

kernel32

GetPrivateProfileIntA
GetBinaryTypeA
lstrlenW
FindResourceA
GetThreadContext
GetDateFormatW
GetProfileIntA
SetWaitableTimer
GetPrivateProfileIntW
GetProfileIntW
GetTempFileNameW

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ord196

Exports

Exports

?IsInstallCompleted@@YGKXZ

Sections

.itext
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE