389bf8ae00fa7d9649115965e82a7c31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

389bf8ae00fa7d9649115965e82a7c31_JaffaCakes118
Size

191KB
MD5

389bf8ae00fa7d9649115965e82a7c31
SHA1

42d61e4ecfdbd22dd7d10fa06b0919093c197244
SHA256

8e3836f21633aeebb0d16e512d546ecbe7e688ca6ceb99623bc1cd7b26f6d7ed
SHA512

83ff6371dadd39761fbfbc9b9c4eb6274697fe49d3499bd8db1d8c8e561f8327cd3c0805338888c24aeac81ca62da256b19df07d491a15db3f26f83a64f4dac4
SSDEEP

3072:gNL/RG04UoEuqHVvB3PuqeqbTxj21zuiaU2DnFGaYwVt6/lRsxPwsFj8XiF:gN9GcoxqHVv5PblOuz9G8bwKVVIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
389bf8ae00fa7d9649115965e82a7c31_JaffaCakes118

Files

389bf8ae00fa7d9649115965e82a7c31_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aa4d0a33c88cf9c70f8e9ba595e07d6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\gdydlTz\YBqaRvjLfLme\wLjykhxCxLSsl\nAliwjokbOwJtS.pdb

Imports

kernel32

GetUserDefaultUILanguage
GetSystemInfo
GetProfileIntA
lstrlenW
SetSystemTimeAdjustment
GetProfileIntW
DeleteCriticalSection
CreateFileW
lstrcmpiW
GetDateFormatA
GetPrivateProfileIntA

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

MessageBoxW

shell32

ord196

Exports

Exports

?MegaUploaderFunc@@YGKXZ

Sections

.itext
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE