ad2e11c582cf77bcf97efd145cc4e86d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad2e11c582cf77bcf97efd145cc4e86d_JaffaCakes118
Size

161KB
MD5

ad2e11c582cf77bcf97efd145cc4e86d
SHA1

ac5c95f935acc2cf2e53d16dcd9f1c8fd5cfeee7
SHA256

9a21528feb92230cc48f7ca86526e621a18bea1d8dd7f5b9fee698fcff2e5dcc
SHA512

a56b27559be6b07753eaca8a900f0a6a4a90e41fe0d145fc3af7dc9b47e16b80e956dda0877bc63d029d962e964a09936471e1ca8a1c409a1c1b2dda72099bb8
SSDEEP

3072:XuHZu+DGJqtK9JF4a2qtvhxRzc78sFtz3KifpXvHZxx4MmphiDI:XuHZhGIkJF0qtHRzo93aqXvZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad2e11c582cf77bcf97efd145cc4e86d_JaffaCakes118

Files

ad2e11c582cf77bcf97efd145cc4e86d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6454e8f08fc5ee2d341167fdbffcd346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
wsprintfW
GetKeyState
CharNextA
wsprintfA
MessageBoxA
GetTopWindow
CharLowerA

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

kernel32

GetProcAddress
GetThreadIOPendingFlag
SetEndOfFile
GetLastError
GetModuleFileNameA
CloseHandle
TransmitCommChar
WriteFile
MultiByteToWideChar
IsBadReadPtr
CompareStringA
LoadLibraryA
InterlockedIncrement
EnumResourceNamesW
CompareStringW
CreateFileW
WideCharToMultiByte
SetStdHandle
FlushFileBuffers
LoadLibraryW
ExitProcess
InterlockedDecrement
GetTempPathW
FreeLibrary
CreateMutexA
SetEnvironmentVariableA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ