b9ca1884c6188ded49b214e0b5626d20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ca1884c6188ded49b214e0b5626d20_JaffaCakes118
Size

178KB
MD5

b9ca1884c6188ded49b214e0b5626d20
SHA1

8af76260bf7ee318d0e80a409f5b06948917d428
SHA256

2bfe6134633bcd187760fb389f535ff0d99578cc088664423b0b64a4f5b17d20
SHA512

09e0b31e91299683b1b8c2b3e1b7967d13fc69454f1070718929e2d4b2820471ad2235084937c9047a04787cd2c6bb335f01facdd740111d4dbe5a3d43ed9d7e
SSDEEP

3072:d35Uuy4Tp/eiyoIA8KkScjZLLLSOJdWms/M9IUuxS5Ui++nmbD4/sEJD:dVTp/ZIAcZLPJdWms/MST85UVbD4kEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ca1884c6188ded49b214e0b5626d20_JaffaCakes118

Files

b9ca1884c6188ded49b214e0b5626d20_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9b7ad7d87f3f1f12cf3d238058c5c9ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Lost Folder Info\ProjFileNameData

Imports

kernel32

GetThreadLocale
CreateFileA
_lopen
LoadLibraryW
AddAtomA
IsDBCSLeadByte
LCMapStringA
SetCurrentDirectoryA
GetModuleHandleW
GetCommandLineA
OpenFile
GlobalCompact
lstrcmpiW

psapi

QueryWorkingSet

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

IsCharAlphaA

Exports

Exports

_SwapMouseButtonSwapMouseButton@0

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ