62ffe5bdc26446054c49f25661a3024a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62ffe5bdc26446054c49f25661a3024a_JaffaCakes118
Size

189KB
MD5

62ffe5bdc26446054c49f25661a3024a
SHA1

7ae0ff9369179901e9c91d8a7227879eea98646d
SHA256

5db29ad1406f60cb4e95ef5ad051ada53c76d6642e027ae6bb89c6c779390999
SHA512

9d15d78f5dc4adea8c275a9cbf2349020aaf51d2b6d0ea83aaae4e6ee880a52766d694c61e7aa713174b29aa84908793d035fbfce4adb0122e0414685765f89c
SSDEEP

3072:GgbnZSbERzHYyYeM+y4lfutsio1x3V8UV79huip6mVz:VbZ0ER0ynfuFyj8U3hCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62ffe5bdc26446054c49f25661a3024a_JaffaCakes118

Files

62ffe5bdc26446054c49f25661a3024a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94a9a5289654f0d5c0b21d86de1f2328

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\baWagJZiGjnt\xinTTzwzeHjrhf\dwseljzoh\oeswbibf.pdb

Imports

kernel32

GetCommState
CreateFileMappingA
HeapSize
SetEndOfFile
DeleteFileA
VirtualProtect
SearchPathW

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

CheckRadioButton
MessageBoxW

ntdll

RtlCaptureContext

Exports

Exports

?InsertCustomData@@YGKXZ

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ