5a8a6bdb1f1f535888cc2ba80ff6adac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a8a6bdb1f1f535888cc2ba80ff6adac_JaffaCakes118
Size

185KB
MD5

5a8a6bdb1f1f535888cc2ba80ff6adac
SHA1

5063d7644c5d38d871444e802987362b5e8d047a
SHA256

2275f5ffc025a74e88511bae778f9556a687cc772112e4f5749789b75a4820fa
SHA512

aa0b9db80a2074910e2fc96743167131db62ca71c044aa44388646a31d8218ddc81f023175bf3cf705e5adc95e3237a1943fb171d808bf48a0deb5eff45c1ade
SSDEEP

3072:Ya2M8E1LBQQMZFtkCpPFoqM2WMAODEY5Hv66WjrLgphxDYlHKuJNB:PSglQHZzkX4AFQvLW7eDYZKuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8a6bdb1f1f535888cc2ba80ff6adac_JaffaCakes118

Files

5a8a6bdb1f1f535888cc2ba80ff6adac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1f949c9f2e3b00bff2f53f7a4e7cc0b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\zIcjlPhjxzaF\bdnqpMp\phUywTKEcuoHc\Okjstewe\vetNwQqlk.pdb

Imports

gdi32

PtInRegion
GetTextExtentPointA
RemoveFontResourceW
FillRgn
CreateCompatibleBitmap

kernel32

OpenFileMappingA
GetProfileIntW
GetCommandLineW
SetThreadPriority
ReleaseMutex
GetProfileSectionA
CreateEventW
LoadLibraryExW

shlwapi

PathUnquoteSpacesA
StrToInt64ExW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

Exports

Exports

?ToTestFunction@@YGKXZ

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg01
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ