cf25196916cfba519ce32fd4715b4076_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf25196916cfba519ce32fd4715b4076_JaffaCakes118
Size

186KB
MD5

cf25196916cfba519ce32fd4715b4076
SHA1

0d5ee36a0c053e94afe6683c991dac0359fbbac3
SHA256

be9103bd39582da26bc026db247b417a417ce1e171416651cbe54e791e7b88a1
SHA512

23929c74a18e97b66bd61fd52dd492efca8a6a6c0893c12302d8d23682f556321fa0ac8d307afd88a45a874841783bd6d55d0fd7ba04afca36d8587b3eafdb6f
SSDEEP

3072:w2OJOm0G1tF3sPtJ9qO6lxDxVfC4fbx6DW/yHF1un7Rn/q:w4vG1tk/qO6lxDxVX9gHF2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf25196916cfba519ce32fd4715b4076_JaffaCakes118

Files

cf25196916cfba519ce32fd4715b4076_JaffaCakes118
.exe windows:5 windows x86 arch:x86

853156e53047052282397701fd81476b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\JTygZVhoh\NjpWgyAUCm\yeoncPc.pdb

Imports

kernel32

HeapAlloc
MapViewOfFile
RemoveDirectoryW
CreateDirectoryA
SetEvent
GetPrivateProfileIntA
SetThreadLocale
CreateDirectoryW
lstrlenA
MoveFileExW
GetProfileIntW

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

FillRgn

Exports

Exports

?SuperFunctionCall@@YGKXZ

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug01
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ