e11fe0c3ce3e8aed0389b27adf579b3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e11fe0c3ce3e8aed0389b27adf579b3f_JaffaCakes118
Size

176KB
MD5

e11fe0c3ce3e8aed0389b27adf579b3f
SHA1

8c4506604dfa2900a3aeae509b7843beeed16f82
SHA256

5ae86b8f15e92600b7934a79330c7dfdc54cbbe966bd046a8298644a7f80c736
SHA512

ee7b2dee9c7513299ae11177a45562b66e49fc239190a6e285830e2386caad5541e68b9b315294a76aadee48e3ee710898f9d56bc5e3857b71ca9e8d6cc0a8c1
SSDEEP

3072:JvlcskePMbFzA1bTSkjFba7cZCwc45sUhxNcZzmWqdgBgEthTS+lcNL+:QzeP+zA1HhatB4+s+FZqi6EbTS++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e11fe0c3ce3e8aed0389b27adf579b3f_JaffaCakes118

Files

e11fe0c3ce3e8aed0389b27adf579b3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7c58937807c513a61c5c3d8c7d271b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyState
GetTopWindow
CharNextA
CharLowerA

kernel32

GetThreadPriority
InterlockedDecrement
TransmitCommChar
FreeLibrary
EnumResourceNamesW
ExitProcess
GetProcAddress
LoadLibraryW
LoadLibraryA
InterlockedIncrement

msimg32

AlphaBlend
TransparentBlt

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ