393370ac8b5477a56f4e3d3d066fafe6_JaffaCakes118 | Triage

Sharing

General

Target

393370ac8b5477a56f4e3d3d066fafe6_JaffaCakes118
Size

167KB
MD5

393370ac8b5477a56f4e3d3d066fafe6
SHA1

f284628861a35983facba6a7670afd6143226ff0
SHA256

188fc5d31f0900cdb91120152068d190c45d003694a8315b3e8b0ba7a10be2c4
SHA512

3f9459b5a55cbb3b7b5033a7f51324a021ee8be1bec605bd8905e62f0e947d39d0d4501b5ffb6dfd1d4885e21357b0484db77a62fc904eeabdf7fdffcca75f60
SSDEEP

3072:9vzbnLeqHfZRcyQH+t+Cw8BiS5Jc/1yg2rRB87bXD0eQ6MqdSW6k7nSt7sXwN:hbV/ZRcHH2+D8oXh2rT8fvok7Wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393370ac8b5477a56f4e3d3d066fafe6_JaffaCakes118

Files

393370ac8b5477a56f4e3d3d066fafe6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e0368b5600f498fa33a4deee15f08ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
GetProcAddress
TransmitCommChar
LoadLibraryA
EnumResourceNamesW
ExitProcess
InterlockedDecrement
FreeLibrary
LoadLibraryW
InterlockedIncrement

user32

GetKeyState
CharNextA
GetClassLongA
CharLowerA

msimg32

AlphaBlend
TransparentBlt

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ