b5ecebe5f8f404a33ff89bbc3a903499_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5ecebe5f8f404a33ff89bbc3a903499_JaffaCakes118
Size

86KB
MD5

b5ecebe5f8f404a33ff89bbc3a903499
SHA1

2555ca94923b5c5638add30d4e3f51ed325f6364
SHA256

560f5efef03a5a07bd68f171a6063b9bdf05821317ced45cb61a2637c8ad8590
SHA512

03e25f6830eecc0bf5d5596655eb5e4aa19a019461a6c45cc6e3560306a97e46a25707777356667c932c23b660af727b2e357812ff12f561b9ac873b255d5414
SSDEEP

1536:XkdsYh1xEr8J/iwZd8KNKymoTAP/ymRzaG/bzpgLdGla5lLZgZ:jQEgJ/iwZRADbPLdaGWGla53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5ecebe5f8f404a33ff89bbc3a903499_JaffaCakes118

Files

b5ecebe5f8f404a33ff89bbc3a903499_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0601ced6f380108708662014b8ca5b35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetThreadLocale
LocalFree
CloseHandle
GetCurrentThread
VirtualAlloc
LoadLibraryA
VirtualProtect
GetProcAddress
GetModuleHandleA

user32

GetFocus
GetKeyState
TranslateMessage
DispatchMessageA
CharNextA
GetMessageA

advapi32

RegOpenKeyW
RegOpenKeyA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ