3b72a91f5f4e632df9663030654eeecf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b72a91f5f4e632df9663030654eeecf_JaffaCakes118
Size

161KB
MD5

3b72a91f5f4e632df9663030654eeecf
SHA1

06d5402bfac1fec7dd51bd3d2a610b082fd6968c
SHA256

86dc46dd8293689041754cdfd8d694ac996c2b7514f34b84f08a0d66b9071481
SHA512

cafffe6ba352bd79b8e2152f8d78f1627928095860abe9fedcf7c3bfd073e988cf9962ece84e248db569598cb32406ded90870a2791c355aefcec508bbc6e880
SSDEEP

3072:XuHZu+DGJqtK9JF4a2qtvhxRzc78sFtz3KifpXvHZxx4MmphiDI:XuHZhGIkJF0qtHRzo93aqXvZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b72a91f5f4e632df9663030654eeecf_JaffaCakes118

Files

3b72a91f5f4e632df9663030654eeecf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6454e8f08fc5ee2d341167fdbffcd346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
wsprintfW
GetKeyState
CharNextA
wsprintfA
MessageBoxA
GetTopWindow
CharLowerA

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

kernel32

GetProcAddress
GetThreadIOPendingFlag
SetEndOfFile
GetLastError
GetModuleFileNameA
CloseHandle
TransmitCommChar
WriteFile
MultiByteToWideChar
IsBadReadPtr
CompareStringA
LoadLibraryA
InterlockedIncrement
EnumResourceNamesW
CompareStringW
CreateFileW
WideCharToMultiByte
SetStdHandle
FlushFileBuffers
LoadLibraryW
ExitProcess
InterlockedDecrement
GetTempPathW
FreeLibrary
CreateMutexA
SetEnvironmentVariableA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ