3e453815d11103cd00dc0c6ddbef5f90_JaffaCakes118 | Triage

Sharing

General

Target

3e453815d11103cd00dc0c6ddbef5f90_JaffaCakes118
Size

113KB
MD5

3e453815d11103cd00dc0c6ddbef5f90
SHA1

b768be3f5faf957025689d22c3c14f4792e5549b
SHA256

c1a280b78be90c6d3cfa83396aa0b3090d6b3c6690a4208a0101cb3069687a90
SHA512

82a067f2b4aab7a2d8be493bef070eeacbdc5b3d90008b26e5ad3eb2a902624ca9cfd3429bff0480b1cc908d33f5581b5cd372942c3f853181264d4966b56a90
SSDEEP

3072:t/eJ5DmQpYBvcmRTPS2ohpfNtt3EWak/oPxhofqf:t45qQ2XzonfR3EWaSoJ6yf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/keygen.exe

Files

3e453815d11103cd00dc0c6ddbef5f90_JaffaCakes118
.rar
keygen.exe
.exe windows:1 windows x86 arch:x86

d975e67c56935cbdd8d15c60c37c5eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

SetTextColor

winmm

waveOutGetPosition

Sections

CODE
Size: 105KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
下载说明.htm
.html .js polyglot