c0d97823660222416c81148d20d5b3c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d97823660222416c81148d20d5b3c4_JaffaCakes118
Size

187KB
MD5

c0d97823660222416c81148d20d5b3c4
SHA1

36c93fc3a2e2f4210f58073feb48d2ee72accf0a
SHA256

2a935d1f57412536bd41233e1594705d8acfc66190b38776bee173de26a55bae
SHA512

c2d745f954064ee454f9de227bab751ac279294ef116bd4fb9dd14f56b64c0e00d417fa2fa6ead52df2ab015b67cd7352b3d299a0e091856e49405d023375ff3
SSDEEP

3072:qvMEkiAYkAqV4IJHkO8jy/EgtOx7oKq2Hb4RZirk//S1gGNnefMAEDeQ96q6hK/:eMEDzq3EBy/Egy7q2HUn0s6AkHek6nQ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d97823660222416c81148d20d5b3c4_JaffaCakes118

Files

c0d97823660222416c81148d20d5b3c4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

65f1779b686361b65fa2914474ac66e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\duukEjqePX\tebjnMurqSN\hdpqDVVttABxsx\tkHZOlVN.pdb

Imports

kernel32

SetCurrentDirectoryA
EnumResourceTypesA
GetFileInformationByHandle
FlushFileBuffers
WaitForSingleObjectEx
EnumSystemLocalesA
HeapAlloc

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

GetForegroundWindow
MessageBoxW
KillTimer
CheckRadioButton

ntdll

RtlCaptureContext

Exports

Exports

?InsertCustomData@@YGKXZ

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE