e0edf886205cc7446e1cdbe3790f79c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0edf886205cc7446e1cdbe3790f79c2_JaffaCakes118
Size

172KB
MD5

e0edf886205cc7446e1cdbe3790f79c2
SHA1

92efd1963b816014b295f27a6efe3e0dc8dec02f
SHA256

59bdb70de5af8f186c34b694e6b684e77c1497e457a4676f120cfa128402af43
SHA512

a1b7ad584867eb53fbb3178f12adc3ffe6f637fda326f43983f839ebac98653751fd4addff1af7df39c11101f68036b63f28a6f1aafd5b9a4b4bafe7ca778de6
SSDEEP

3072:jv2WE9imnHzcsr8Ip6HELD0htOjfP7BGG67KO+lT5M/DujHyP9SX:/CH3r6HELMtOLP7BGG1OO5K6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0edf886205cc7446e1cdbe3790f79c2_JaffaCakes118

Files

e0edf886205cc7446e1cdbe3790f79c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e933b5e34a568ca0b79188a61cef4ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
GetProcAddress
TransmitCommChar
InterlockedDecrement
EnumResourceNamesW
ExitProcess
FreeLibrary
LoadLibraryW
LoadLibraryA
InterlockedIncrement

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

user32

CharNextA
GetTopWindow
GetKeyState
CharLowerA

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ