cf7931eb17daaaf1e96a6dc69877d607_JaffaCakes118 | Triage

Sharing

General

Target

cf7931eb17daaaf1e96a6dc69877d607_JaffaCakes118
Size

184KB
MD5

cf7931eb17daaaf1e96a6dc69877d607
SHA1

ac2f948902859b680b29002cc4904fd61d6be761
SHA256

9628cf3fc216c91f6d7f6ea43bddaed095ef89e91f156478447dc1682cbf4fe1
SHA512

f08636c2fb96981a0b99022ae8269cf5d47adb0b2b6e3e6778e92673722015fe11898c4f7c5aa52149878ee01249da39f96c0da9baa2f7da2ce05f6717550ec6
SSDEEP

3072:Ma2M8n+wiqAWx+Sq3zHWuAuzz9UiKFPy7kW1pT1un7RW79WIxn:DS+wPAWG6ufmiC+L1FdWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf7931eb17daaaf1e96a6dc69877d607_JaffaCakes118

Files

cf7931eb17daaaf1e96a6dc69877d607_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1f949c9f2e3b00bff2f53f7a4e7cc0b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\zIcjlPhjxzaF\bdnqpMp\phUywTKEcuoHc\Okjstewe\vetNwQqlk.pdb

Imports

gdi32

PtInRegion
GetTextExtentPointA
RemoveFontResourceW
FillRgn
CreateCompatibleBitmap

kernel32

OpenFileMappingA
GetProfileIntW
GetCommandLineW
SetThreadPriority
ReleaseMutex
GetProfileSectionA
CreateEventW
LoadLibraryExW

shlwapi

PathUnquoteSpacesA
StrToInt64ExW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

Exports

Exports

?ToTestFunction@@YGKXZ

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg01
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ