dd4a3b4e906bc3c3b7061a15a017561b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd4a3b4e906bc3c3b7061a15a017561b_JaffaCakes118
Size

184KB
MD5

dd4a3b4e906bc3c3b7061a15a017561b
SHA1

25b2f71bd8b237fdd83fb5e355b674dbacb6896b
SHA256

cdf8e96f3af5d0935d5f694445839cceb2f51960199d144ce4f167c8b2397d48
SHA512

579596b70a63d575bb01d08d38c061b7d3e82b618dfc7caeb322e722337570e44653962fba15cb84e69d1a3a946569655ab1d931620ca89b8e4c7b3b237cffe3
SSDEEP

3072:0a2M8GlspHWOepRGLf8SqjsL/R/9xGeWy0hQPNkGkxqWmn1un7Rw6:LSGlsM3sL/RFxGgPNlkdmnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd4a3b4e906bc3c3b7061a15a017561b_JaffaCakes118

Files

dd4a3b4e906bc3c3b7061a15a017561b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1f949c9f2e3b00bff2f53f7a4e7cc0b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\zIcjlPhjxzaF\bdnqpMp\phUywTKEcuoHc\Okjstewe\vetNwQqlk.pdb

Imports

gdi32

PtInRegion
GetTextExtentPointA
RemoveFontResourceW
FillRgn
CreateCompatibleBitmap

kernel32

OpenFileMappingA
GetProfileIntW
GetCommandLineW
SetThreadPriority
ReleaseMutex
GetProfileSectionA
CreateEventW
LoadLibraryExW

shlwapi

PathUnquoteSpacesA
StrToInt64ExW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

Exports

Exports

?ToTestFunction@@YGKXZ

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbg01
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ