5a14e2af7c26141c1c3117f10fb361db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a14e2af7c26141c1c3117f10fb361db_JaffaCakes118
Size

180KB
MD5

5a14e2af7c26141c1c3117f10fb361db
SHA1

063ee3cbf60fd789f6013a087525e7a79c917abb
SHA256

c13ec332f91995145b776329c807a9ad2eb21d4717e6514a4e802dfe8ae1a9bd
SHA512

49389b6458c025056e38d06801932e33b749e1c3bf50f02e1573084d952e40e79f4d89231a4c92b22d876d1b1dd26f2e750f24aceb55ae8475f7384205f72dc3
SSDEEP

3072:tvOfNLDorbgP9vG4bxx8nS/8mL0LX4A6wjx3HVu9BLKnfOnsockhPHrFFNS:oBDqgP9LbYjmL07aSx3HV0c2nsockhPI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a14e2af7c26141c1c3117f10fb361db_JaffaCakes118

Files

5a14e2af7c26141c1c3117f10fb361db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67ad2be3468d173b9dea803d7050250b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

kernel32

GetThreadPriority
FreeLibrary
SetCommTimeouts
LoadLibraryA
EnumResourceNamesA
ExitProcess
GetProcessHeap
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

user32

GetClassLongA
GetKeyState
CharNextA
CharLowerA

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ