c25ce2e6016ddf28d50d17c4fa9f312e_JaffaCakes118 | Triage

Sharing

General

Target

c25ce2e6016ddf28d50d17c4fa9f312e_JaffaCakes118
Size

82KB
MD5

c25ce2e6016ddf28d50d17c4fa9f312e
SHA1

f4f2325a578f8115a8d887803368f06196df8da1
SHA256

471a6175dc28dc0caa215b9fd55ad142670b9c1ab76c857ec181fdb9e483c449
SHA512

d1eb8faa52b83dba7db39c1cd5dc5d081dfd97070899ffac86a151bb304162aeb5e3dc70dadc797eef66aad8b05d4c003b3cac414feda56879e98ecd3464944f
SSDEEP

1536:AFd4MzDGYz3JqwzTU8rzfplY28Np5+JghXJaIOeWiclC71PmOLY1C:EDhz5nzTUMBb8d+AczYc8PNKC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/keygen/chili-keygen.exe

Files

c25ce2e6016ddf28d50d17c4fa9f312e_JaffaCakes118
.rar
keygen/CHiLi.nfo
keygen/chili-keygen.exe
.exe windows:5 windows x86 arch:x86

8c8b78ff4a5bb694ae1b0a40cec3dcdf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

LoadIconA

gdi32

DeleteObject

winmm

waveOutOpen

Sections

.MPRESS1
Size: 68KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
keygen/file_id.diz