c7ff0a73a0278826405c43ee50505fbb_JaffaCakes118 | Triage

Sharing

General

Target

c7ff0a73a0278826405c43ee50505fbb_JaffaCakes118
Size

54KB
MD5

c7ff0a73a0278826405c43ee50505fbb
SHA1

54f05acdd07dda778da5874c126c2e2e4736a160
SHA256

c6a8c11ec5c432b3e7e12ef6b99463f553b40fd23028b4795414851402b61830
SHA512

f05f01e70178103945fe12c41ad9b20c42aabc49749730a11717759ae1036ca66023c7b506506c64c5776630ca90a1a54376042400c6c502f4685a4bbb200db4
SSDEEP

1536:hh3GRwIo7rXTOqwcPQ6EeQKhyXOSXfDrnNpD2F1Bg:7GzqOXfdeQbNXfv76F1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7ff0a73a0278826405c43ee50505fbb_JaffaCakes118

Files

c7ff0a73a0278826405c43ee50505fbb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

27296df19676b2be73140ddcfac37b5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
WriteConsoleA
VirtualProtect
EndUpdateResourceA
ExitThread
ExitProcess
MulDiv

user32

GetKeyNameTextA
BroadcastSystemMessageExA
ChangeClipboardChain
SendNotifyMessageW
GetWindowLongA

Exports

Exports

Kaokunamvk
Uibqqaoaaqj
SetOacyleenb
Lbpkfvqm
Byksmmjmpkd
Ytekbbjyjul
ReadKuymevagn
SetFwikguy
EndAephbeifitc
BeginAgxsgpox
Losbkmwmk
Mvhwaax
ReadDkxjmygl
Hbistlx
EndYuykvdqh
Qvvymmugrkl
Mxqibintws
Glsshvod
ReadRhhlmavco
Wuamscpbacr

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ