a8c6704ffbbbfc86a82657eabb2657f1_JaffaCakes118 | Triage

Sharing

General

Target

a8c6704ffbbbfc86a82657eabb2657f1_JaffaCakes118
Size

172KB
MD5

a8c6704ffbbbfc86a82657eabb2657f1
SHA1

89386e079f867db9bd97861ac0f2bba04af8af44
SHA256

535a08dcf78edf126c37f585741ba8d5e1badcd64c97632a2ac81f21390657b0
SHA512

9da593c746f0cb7513d721595009eab2b3e7ba515f723052680ae2caea1a9c0f3ffa8f027a8989bc693bd080d6880be3f84242d5cf55db3312b3dd2d965ba9ab
SSDEEP

3072:UtiKCNwoWu8e3n/rAR+30+xlhQnnEcDLGZ+ePIKeCF0dci0uK4d+F8+uwgim:IiKIwoW2s+hl6nnEcDpJe0d3OpF8+uq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c6704ffbbbfc86a82657eabb2657f1_JaffaCakes118

Files

a8c6704ffbbbfc86a82657eabb2657f1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

318b8d1729da92d70d89aecb8435b3e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\WsWdlaAlmp\bbXyyUv\nKdvTcglwG\QcwhaaYMscAds.pdb

Imports

kernel32

SetTimerQueueTimer
GetTimeFormatA
GetStartupInfoA
GetStdHandle
GetModuleHandleA
CloseHandle
GetThreadTimes

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

ShowCursor
SetCursorPos
GetFocus
MessageBeep
IsWindowUnicode
IsWindow
GetTopWindow
GetClientRect
OffsetRect

ntdll

RtlCompareMemory

Exports

Exports

?InsertFil

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fxc
Size: - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fx
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ