9553cd758710852f4e0827918291eb7f_JaffaCakes118 | Triage

Sharing

General

Target

9553cd758710852f4e0827918291eb7f_JaffaCakes118
Size

186KB
MD5

9553cd758710852f4e0827918291eb7f
SHA1

f40a03a15b219f7f2813cfb6d227385490adc48b
SHA256

2070e5818bc6a4ddaeb58c239a74b142e543fc9e3d0dc5dba0ab6bcac6989ee2
SHA512

0871ea2bcebffc981fde21a5615942ef778aa8bfea68deae375744381ab90c752dcfba8a65957249eeb0560ec737888a69f3658663728f4c81db7cdbd6df7fab
SSDEEP

3072:Z2OJOZ42KyXQQYlXXaeKNtVqPUhH3KYiIDq3HiQz1TkK4o3gfLDn1un7R5:Z4NRxSXXstVqMN3KYiIDq3CQztkto3Gn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9553cd758710852f4e0827918291eb7f_JaffaCakes118

Files

9553cd758710852f4e0827918291eb7f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

853156e53047052282397701fd81476b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\JTygZVhoh\NjpWgyAUCm\yeoncPc.pdb

Imports

kernel32

HeapAlloc
MapViewOfFile
RemoveDirectoryW
CreateDirectoryA
SetEvent
GetPrivateProfileIntA
SetThreadLocale
CreateDirectoryW
lstrlenA
MoveFileExW
GetProfileIntW

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

FillRgn

Exports

Exports

?SuperFunctionCall@@YGKXZ

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug01
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ