df1adef06fd8381e9e6866c9c8db61f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df1adef06fd8381e9e6866c9c8db61f0_JaffaCakes118
Size

191KB
MD5

df1adef06fd8381e9e6866c9c8db61f0
SHA1

aedac106ad8478eb03ebaea162967e636762e4b9
SHA256

7db0c6cfefd4033750e54a49e3643af30ecf8bc8fa59f79f8e0087023b5adcb0
SHA512

a5152cb9941a1ce6a7c98e8e3221b8b32a7f8b9fee50aa438ccfb4b25793990e206e2038ce0c2c5b7c684f2304e10231a814d73c59cfe64c09b1e7a005356052
SSDEEP

3072:TNL53Ou9KFiRTwDKOrJIQ+Ai94jLocKrUjf1eWxpELgSZRs/lRsx6xP6hI:TN13OuykwDK+JI8Loc3jf1eseEGRWK4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df1adef06fd8381e9e6866c9c8db61f0_JaffaCakes118

Files

df1adef06fd8381e9e6866c9c8db61f0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aa4d0a33c88cf9c70f8e9ba595e07d6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\gdydlTz\YBqaRvjLfLme\wLjykhxCxLSsl\nAliwjokbOwJtS.pdb

Imports

kernel32

GetUserDefaultUILanguage
GetSystemInfo
GetProfileIntA
lstrlenW
SetSystemTimeAdjustment
GetProfileIntW
DeleteCriticalSection
CreateFileW
lstrcmpiW
GetDateFormatA
GetPrivateProfileIntA

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

MessageBoxW

shell32

ord196

Exports

Exports

?MegaUploaderFunc@@YGKXZ

Sections

.itext
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE