86179254a1b77cd8bec12a1b284ac412_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86179254a1b77cd8bec12a1b284ac412_JaffaCakes118
Size

162KB
MD5

86179254a1b77cd8bec12a1b284ac412
SHA1

5e17d47a1fea1d689a2f93399a57cd0187886f26
SHA256

90474802d1304ab033454de2307842cdf26d69d7272a6eb413e9a38ae29f8c6e
SHA512

ba261e0f3fd9fe5c8626ac17129838b186b3eddfa71ed3a455a59c4176214cf3f827e210ab8e7ebc946e5bbe1c4e6e284931486721a559aabc02bcdf40fdc622
SSDEEP

3072:wvKt7YYbUJ9C9x4IuB16fE2U06QHWZwqXGLCabN+9jejziNhgBfS:kYbkC9xBGe96QHW6qWWaR+pGONq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86179254a1b77cd8bec12a1b284ac412_JaffaCakes118

Files

86179254a1b77cd8bec12a1b284ac412_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85ddb618411b82491fdf99c6356ae3a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetKeyState
GetClassLongA
CharLowerA

msimg32

AlphaBlend
TransparentBlt

kernel32

GetThreadPriority
GetProcAddress
SetCommTimeouts
LoadLibraryA
EnumResourceNamesA
ExitProcess
VirtualAlloc
FreeLibrary
GetProcessHeap
VirtualFree

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ