88368d5c8c90afacdd54203ea1ceae94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88368d5c8c90afacdd54203ea1ceae94_JaffaCakes118
Size

189KB
MD5

88368d5c8c90afacdd54203ea1ceae94
SHA1

06a2f625fff6aa143183b0f972885b5e174d5166
SHA256

f2cf8b5b5eb73e0ef5279288b7d400243a04bb67c392b369e1fbc544059ec3d2
SHA512

c7a7ba9518cc852f14754365f86b0dd850d03359a881440ca2d8c12b808c2219142bd8adc2f86e1c26a92a1130e3e72269c19865e16d07cab931360be27d4956
SSDEEP

3072:C2qJOdZo06ANpmqqsO4sMQJ+SXE5Pb58QeFCbumVBHRZlmo3i/2ontjmj7Np3bSP:C4dZJ6ANpmqVw+X5z5HqvmVB9tGvi7fC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88368d5c8c90afacdd54203ea1ceae94_JaffaCakes118

Files

88368d5c8c90afacdd54203ea1ceae94_JaffaCakes118
.dll windows:5 windows x86 arch:x86

853156e53047052282397701fd81476b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

V:\TbAnzUyrcw\EqIweyjtlp\tqiwwquY\pagenmf\upbhesazcR.pdb

Imports

kernel32

HeapAlloc
MapViewOfFile
RemoveDirectoryW
CreateDirectoryA
SetEvent
GetPrivateProfileIntA
SetThreadLocale
CreateDirectoryW
lstrlenA
MoveFileExW
GetProfileIntW

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

FillRgn

Exports

Exports

?SuperFunctionCall@@YGKXZ

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg01
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ