b6ffd06817fc65316bcc2ab1ce56e3e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6ffd06817fc65316bcc2ab1ce56e3e1_JaffaCakes118
Size

3.5MB
MD5

b6ffd06817fc65316bcc2ab1ce56e3e1
SHA1

b9ddbd3c77f303caed7020a874643464415d91c1
SHA256

99a40845a52947ae9591950557501635a4076a8a05251e7162c35be35bace7b2
SHA512

a527965661b368eea481ea81856f20937cfa290cabcac6a28c2f9c29c0c09c131c10465a259f8374cba97605c9d5228840d77b044e2a0ca80a52fb066ef834ac
SSDEEP

98304:2XkY60NJDQhBQhk6EMy0DwbKraZsIzDvDzYmYK/2:YkYJNBMh6Fy0DfWHz7DN/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/keygen.exe

Files

b6ffd06817fc65316bcc2ab1ce56e3e1_JaffaCakes118
.rar
keygen.exe
.exe windows:1 windows x86 arch:x86

d975e67c56935cbdd8d15c60c37c5eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

SetTextColor

winmm

waveOutGetPosition

Sections

CODE
Size: 110KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE