f66fb1a5519d741a95818deffd1b545a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f66fb1a5519d741a95818deffd1b545a_JaffaCakes118
Size

178KB
MD5

f66fb1a5519d741a95818deffd1b545a
SHA1

13dc9b44e5ade53cc6d206b28f6a43718fae96c5
SHA256

c164bcca6b6723367369c4db2dd71ccaac24cd012f4f8570058fcf5d98213986
SHA512

bd8402ae8b2972b215d16ff96e4bb9613092c4434fd91d0d1302460046a9656fdce7ecc769966f7696caa99c090bf8a0aac81f6c1dbfb05b75719d654816065d
SSDEEP

3072:3vTe4ucH1Bva4KYN+PQWo1HSpd6/JmWgCmABVJDGYgt4gQl7d6QR:CncH1c80YYopmADJDbgOgQl7IQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f66fb1a5519d741a95818deffd1b545a_JaffaCakes118

Files

f66fb1a5519d741a95818deffd1b545a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ae14f8a35a3db0e186b69f73634ee96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

user32

GetKeyState
GetClassLongA
CharNextA
CharLowerA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

kernel32

GetThreadPriority
LoadLibraryW
TransmitCommChar
GetProcAddress
EnumResourceNamesW
ExitProcess
LoadLibraryA
InterlockedDecrement
FreeLibrary
InterlockedIncrement

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ