84faae1c3336fb44b116d4f47bef141f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84faae1c3336fb44b116d4f47bef141f_JaffaCakes118
Size

171KB
MD5

84faae1c3336fb44b116d4f47bef141f
SHA1

b0228428313bb1b52397127f3d72346560ba6ce5
SHA256

933c9de0dbc348e8b105991c80d6b88f28016fa6015210f664c6920c87db37c7
SHA512

92613b65ecad57993ca3ddf14cad6accbf29dd1dac80e0ac449e5106036074fbcb8f0aca4618e1a796fb8b054550c5aeae3427b62849eaab6e18f2bb509ad857
SSDEEP

3072:CSi7WzNAAPJDu/1BTFttGor29cTjz7XQYwRDPUG2cRwPNQUE:5FNBPcXFvS9C793cRIQU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84faae1c3336fb44b116d4f47bef141f_JaffaCakes118

Files

84faae1c3336fb44b116d4f47bef141f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ca514bfb66cdd5260bd729cd7f7fecad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\oIQnqAds\qMpWZZlCaEoMc\RrbwvyFa\cbuawVach\yFhzfGnknzDJs.pdb

Imports

kernel32

GetLocaleInfoW
ResumeThread
GlobalFree
FreeResource
QueryDosDeviceW
GetComputerNameExW
MulDiv

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

ShowCursor
SetCursorPos
GetTopWindow
IsWindow
GetClientRect
IsWindowUnicode
GetFocus
OffsetRect
MessageBeep

ntdll

RtlCompareMemory

Exports

Exports

?InsertFil

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fxc
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fx
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ