4ccb51487d604b3021f1ec8972977a3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ccb51487d604b3021f1ec8972977a3c_JaffaCakes118
Size

169KB
MD5

4ccb51487d604b3021f1ec8972977a3c
SHA1

b7ddfed549d05dabe599d94d576a661af97a0761
SHA256

1c811e5bd860cb8c3aec85fbced780596bc2450dfaa7ce5e08b4edf865b8d32c
SHA512

839a8ef68c1df539c629b0cd0a2a1cf5af5f8a513fee4d35111d6ea48188ce0a831715f377d9a6e690c23b3ceefb0a40756631cbc6d4e639d9ad8fff68d81547
SSDEEP

3072:JSms4I0AU4TUggd9Vqbcje7V1qbp2R6E38IShRPoh5h15p/ZgZ1wTEB:JSmHDbkP6b00kQbp2RA4/h1bk1wTEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ccb51487d604b3021f1ec8972977a3c_JaffaCakes118

Files

4ccb51487d604b3021f1ec8972977a3c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3f8aa0307dd6d50be64afa8f80a10cad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

N:\Exyokorqviyxi\vzkiOLxEaOjI\NxkdlyyzF.pdb

Imports

kernel32

GetCurrentThread
MoveFileA
AddAtomW
lstrcmpiW
GetProfileIntA
GlobalUnlock
GetCompressedFileSizeW
GlobalLock
GetProfileStringA
GetUserDefaultUILanguage

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

AddFontResourceW
CreateRectRgn
DeleteObject
FillRgn

Exports

Exports

?MyDataFunc@@YGKXZ

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug01
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ