2d5dadeeda73ec1cd5b3d6d11e7cc711_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d5dadeeda73ec1cd5b3d6d11e7cc711_JaffaCakes118
Size

192KB
MD5

2d5dadeeda73ec1cd5b3d6d11e7cc711
SHA1

26bf15849feffe9cadef9a0b8ded3c8926dc1c2d
SHA256

bb5e457a3f3e9ab46037a8173c057dfd70826bd63db85f3c5352158d570bace7
SHA512

fb8ef0f991eb3dc092b052427822fe32440fb716345e7aa87321547f3250cdbb74fcc8d08a207c96b65a55e157e884cc01ce14d53a0d395d692eab2378b27bba
SSDEEP

3072:nh33bnQOR1MmnEw7K+v1iruQ1tGXYPeWfwXuhnWZ/y4fIT9GQElKZ6y+mxFxAecm:nZbQOrMmEYKQiF1QYGWo+wZq4fIpkk6W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d5dadeeda73ec1cd5b3d6d11e7cc711_JaffaCakes118

Files

2d5dadeeda73ec1cd5b3d6d11e7cc711_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94a9a5289654f0d5c0b21d86de1f2328

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\baWagJZiGjnt\xinTTzwzeHjrhf\dwseljzoh\oeswbibf.pdb

Imports

kernel32

GetCommState
CreateFileMappingA
HeapSize
SetEndOfFile
DeleteFileA
VirtualProtect
SearchPathW

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

CheckRadioButton
MessageBoxW

ntdll

RtlCaptureContext

Exports

Exports

?InsertCustomData@@YGKXZ

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ