03181ddd0a0719b91a59bf73b073dd6a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03181ddd0a0719b91a59bf73b073dd6a_JaffaCakes118
Size

192KB
MD5

03181ddd0a0719b91a59bf73b073dd6a
SHA1

7b5475db7f84cb7a562c495fbe71d2831511cb08
SHA256

ef9d4aac079e16b639edd12b3be13b7f050ebcc3d80ff3c421a5c67bb643cead
SHA512

ae42f44b5638bfc28f53f6e95410f584260e57cf90e4feaea01dc7bb6395b4172b6f9d6ac98fddef3a981a9e632033ed0305efc6c68abd46f66b4593d0a54dd0
SSDEEP

3072:xhhHq8jDLBwi+hdSTSssVs61YhtwVUfC7ZaqnN5GeLZRhsxFxAecRqTKjfp5MtpV:xbPDL2i+hdSTSssVJYh2nZaszGeVGFxj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03181ddd0a0719b91a59bf73b073dd6a_JaffaCakes118

Files

03181ddd0a0719b91a59bf73b073dd6a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94a9a5289654f0d5c0b21d86de1f2328

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\baWagJZiGjnt\xinTTzwzeHjrhf\dwseljzoh\oeswbibf.pdb

Imports

kernel32

GetCommState
CreateFileMappingA
HeapSize
SetEndOfFile
DeleteFileA
VirtualProtect
SearchPathW

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

CheckRadioButton
MessageBoxW

ntdll

RtlCaptureContext

Exports

Exports

?InsertCustomData@@YGKXZ

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ