f27a8aa5614cf60f68ed775c1367618c_JaffaCakes118 | Triage

Sharing

General

Target

f27a8aa5614cf60f68ed775c1367618c_JaffaCakes118
Size

61KB
MD5

f27a8aa5614cf60f68ed775c1367618c
SHA1

adf56250d585f527fe54d897a3262d9326f17598
SHA256

9c875a95ac4ff8ccb425506cb5fafd1f31e71ab6ded0ef3580c4aa40779f219b
SHA512

e6367006df243d4a2135bd47393f19357cbb9fe73d977b65b1482f6a50ec62679fb824ff8a319c396e2030179fa079bff8ec04e744af7ead9cd294f34c3fc82c
SSDEEP

1536:qkkO48OEkRePdStfgbzoqwVWVkL/S/54Lvmjh0skCj+CjqSU:qkkOlkgigbBlu7TL+Eq+bV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/keygen.exe

Files

f27a8aa5614cf60f68ed775c1367618c_JaffaCakes118
.rar
keygen.exe
.exe windows:4 windows x86 arch:x86

9b0f7d72261ced23f94c5d3632310a17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

TextOutA

winmm

waveOutWrite

Sections

CODE
Size: 55KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
readme first.txt
www.suryadewa.com.URL