a5409463fe8f4d2bfd0fe372e928ee8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5409463fe8f4d2bfd0fe372e928ee8f_JaffaCakes118
Size

184KB
MD5

a5409463fe8f4d2bfd0fe372e928ee8f
SHA1

99d771df2069ccab4b2f1d040b8fd44deace6b96
SHA256

fcf651dbdc2cceb26a62834b285ca3ba039480d6b1d858a24b45262c17e163f1
SHA512

2f0b1e1ecedd1d3d957296e4b692e814d78d1c38eba23a097fefab5ac168b56f897ab41672d3ccb8e7d3380b7c430cfed4cdeac8e9b1b4931763e4627554f691
SSDEEP

3072:8a2M8DxP5iNrCIMvxMctZ5T7ijHRS5F66WAk4iHcorH5f2tNnkY1un7ReNaYTrsw:TSlhiNruv5/YHQTM8AH52f13TZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5409463fe8f4d2bfd0fe372e928ee8f_JaffaCakes118

Files

a5409463fe8f4d2bfd0fe372e928ee8f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1f949c9f2e3b00bff2f53f7a4e7cc0b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\zIcjlPhjxzaF\bdnqpMp\phUywTKEcuoHc\Okjstewe\vetNwQqlk.pdb

Imports

gdi32

PtInRegion
GetTextExtentPointA
RemoveFontResourceW
FillRgn
CreateCompatibleBitmap

kernel32

OpenFileMappingA
GetProfileIntW
GetCommandLineW
SetThreadPriority
ReleaseMutex
GetProfileSectionA
CreateEventW
LoadLibraryExW

shlwapi

PathUnquoteSpacesA
StrToInt64ExW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

Exports

Exports

?ToTestFunction@@YGKXZ

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg01
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ