07f7767b6935286b129ffcbe073d80ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07f7767b6935286b129ffcbe073d80ad_JaffaCakes118
Size

178KB
MD5

07f7767b6935286b129ffcbe073d80ad
SHA1

c0e1b975a25be27eae5cec9d0bdb1f9408692752
SHA256

a8f7bf9369872ad84209d21d416eb83737931faad26270e904be979184a67c37
SHA512

f25b0b58ec775da2e646ea60b01db727c265bb5a7411a07e8c788f39415d49514a5190677f9b42c9f000b30f18c82eeffcb08723d505082be0707e17fd3d4668
SSDEEP

3072:RsythPXr/vwLVgpHlcjz78N+0/J1CpEOtArkc/uWvITeSaVwUvnmbD4/sE5D:6WhP7HEVMFIze+0/38SrHtITPawRbD4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07f7767b6935286b129ffcbe073d80ad_JaffaCakes118

Files

07f7767b6935286b129ffcbe073d80ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9b7ad7d87f3f1f12cf3d238058c5c9ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Lost Folder Info\ProjFileNameData

Imports

kernel32

GetThreadLocale
CreateFileA
_lopen
LoadLibraryW
AddAtomA
IsDBCSLeadByte
LCMapStringA
SetCurrentDirectoryA
GetModuleHandleW
GetCommandLineA
OpenFile
GlobalCompact
lstrcmpiW

psapi

QueryWorkingSet

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

IsCharAlphaA

Exports

Exports

_SwapMouseButtonSwapMouseButton@0

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ