b3a9a15521fe99c943051f71e368b810_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3a9a15521fe99c943051f71e368b810_JaffaCakes118
Size

167KB
MD5

b3a9a15521fe99c943051f71e368b810
SHA1

60cac6572ef4a1def2e30a8a72cfdc5b318da138
SHA256

c1bdb4c474666e7806d251eb882ea8728021a7e27482bd38fcb9137be33fd092
SHA512

3bfbcc87864c1497d07d5186b2cacd3c28c683e56943df66fe6dc2b2272828cce0c5fc3f9ab4627097adfcbf2c95c23edeee2b726357c397597dc2aa94085cef
SSDEEP

3072:JvsG2ciAAAvjN2WSSDtdTqJUtPgs4l6223j4eXS0Vyqkdzuiz:JvjYA/jkWSBUJV20iSyqWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3a9a15521fe99c943051f71e368b810_JaffaCakes118

Files

b3a9a15521fe99c943051f71e368b810_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81c31da05b5ebab36c41091841650912

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\jyonCnNpxZlJwh\XatGWiula\ykpwhKiLfNdzPd\adufkrM\dbephmbdM.pdb

Imports

kernel32

SetThreadContext
GlobalMemoryStatus
GetProfileIntA
ResumeThread
GetProfileStringW
ClearCommBreak
GetSystemWindowsDirectoryW
GetShortPathNameW
ConnectNamedPipe
SetupComm

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

AddFontResourceW
DeleteObject
FillRgn
CreateRectRgn

Exports

Exports

?ToTestFunction@@YGKXZ

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug01
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ