0b933d51603b91c72b5bf6626db47895_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b933d51603b91c72b5bf6626db47895_JaffaCakes118
Size

170KB
MD5

0b933d51603b91c72b5bf6626db47895
SHA1

14fa83bab8a66ab70caecfbd0e90f63aea2ef875
SHA256

87a2d8ab4e4a6a0e69872301577fa5f584f638e200265af1aae356350fa7114f
SHA512

78cc3692593b6077bb88e907b5374724136544f0ac5def04af6d1f6cbe9635dd76ed2f688ce6d08846582280047e16629fda1db0f51847ca72cd377915f5d79a
SSDEEP

3072:LtiKC6ZWnHXDZ/2rgegiOBddcet6HxoU2l47YCIS2cCGrHoXwEMN:JiKHZWnHX1+r9giOBcWYi2Ms22rIAEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b933d51603b91c72b5bf6626db47895_JaffaCakes118

Files

0b933d51603b91c72b5bf6626db47895_JaffaCakes118
.exe windows:5 windows x86 arch:x86

318b8d1729da92d70d89aecb8435b3e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\WsWdlaAlmp\bbXyyUv\nKdvTcglwG\QcwhaaYMscAds.pdb

Imports

kernel32

SetTimerQueueTimer
GetTimeFormatA
GetStartupInfoA
GetStdHandle
GetModuleHandleA
CloseHandle
GetThreadTimes

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

user32

ShowCursor
SetCursorPos
GetFocus
MessageBeep
IsWindowUnicode
IsWindow
GetTopWindow
GetClientRect
OffsetRect

ntdll

RtlCompareMemory

Exports

Exports

?InsertFil

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fxc
Size: - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fx
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ