d3f65cf465d81ad231c403afa49d18cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3f65cf465d81ad231c403afa49d18cc_JaffaCakes118
Size

165KB
MD5

d3f65cf465d81ad231c403afa49d18cc
SHA1

8099fbe5b7cd6ff25b67670008f023a335fb4311
SHA256

718234db4ce2eef89f22b2db7a1b06a214d540b103d18dcea6b4253e4bce1209
SHA512

cf139edbf19bb26bf97e13b43b4b0bcdedcd093843bdcf7bab9d7de638b0437449c780a7e4e3e81088814bb24e55ce89e3b73318651385a1223a69fccdc4d1a1
SSDEEP

3072:8vlRaHh8nK0bQ/w8/QDz0hOb3EmMx8Nk+J:4mhnckhNmMkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3f65cf465d81ad231c403afa49d18cc_JaffaCakes118

Files

d3f65cf465d81ad231c403afa49d18cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5905174de8bf7ad9c08efc3cd1400c47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
FreeLibrary
TransmitCommChar
InterlockedDecrement
EnumResourceNamesW
ExitProcess
GetProcAddress
LoadLibraryW
LoadLibraryA
InterlockedIncrement

msimg32

AlphaBlend
TransparentBlt

user32

CharNextA
GetTopWindow
GetKeyState
CharLowerA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ