7741717b96591779edb1eec28229f839_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7741717b96591779edb1eec28229f839_JaffaCakes118
Size

159KB
MD5

7741717b96591779edb1eec28229f839
SHA1

22ae1625fb2e95536bc27f40ddacc2bc1ee68a9d
SHA256

301b76112a97c480158b59de0ebffa1dfb154a736cab121a925be6af388615fb
SHA512

90902acc9fb23c98b9fe8856667dd26b74e108ff18d0d8ba6011f37b5a1dd3abadf6b7fce76b46a1098470bb216667257fcfe22e467eacd18fecbce1782c32e3
SSDEEP

3072:phQF6Mkng3ebcRlYE95SJjYcLCeJaKbWkCbV9iuw9Ccjxrmqf9WsrcZ:piFCwlyE9WTCeJaixUVDjcjxrmqAsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7741717b96591779edb1eec28229f839_JaffaCakes118

Files

7741717b96591779edb1eec28229f839_JaffaCakes118
.exe windows:4 windows x86 arch:x86

554e93a5f11fd0b6a87706471daa2233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfW
CharUpperA
GetTopWindow
wsprintfA
GetKeyState
CharNextA
CharLowerA

advapi32

RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

kernel32

GetLastError
SetEndOfFile
CreateMutexA
GetThreadIOPendingFlag
GetModuleFileNameA
WideCharToMultiByte
IsBadReadPtr
TransmitCommChar
FlushFileBuffers
CompareStringA
GetTempPathW
LoadLibraryA
EnumResourceNamesW
LoadLibraryW
CreateFileW
FreeLibrary
GetProcAddress
ExitProcess
CompareStringW
CloseHandle
InterlockedDecrement
WriteFile
MultiByteToWideChar
InterlockedIncrement
SetStdHandle
SetEnvironmentVariableA

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ