ff2133edea83fb2f1adb8531c9ff444c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff2133edea83fb2f1adb8531c9ff444c_JaffaCakes118
Size

171KB
MD5

ff2133edea83fb2f1adb8531c9ff444c
SHA1

61d09e3d74fa625b6066f05b299349ea078cc2e2
SHA256

966e70f9e2426071d1b9cc679e2309fd16f0b1b77cc4d7e21e2494b3c9d3ac97
SHA512

19f6d2fa062af9de1b6ce51b3e5c0b377da1e7af6a45456dca99d9a382097e23df6ebc37c19463acda07764320d479e480ae855d8c5bd334d76141669dc9b429
SSDEEP

3072:3vZWuGR/YxBzs4xUxovC0ihIgvuAcJ9O1da6F6bqfcVuPxIrrztzNzuwRliGVQPN:EuG5SByGvCZvuAcHODtGhNznWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff2133edea83fb2f1adb8531c9ff444c_JaffaCakes118

Files

ff2133edea83fb2f1adb8531c9ff444c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b42f2a70a0dfbc9b1e0a0d0dcff54d10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetTopWindow
CharNextA
GetKeyState
CharLowerA

kernel32

GetThreadPriority
LoadLibraryA
TransmitCommChar
InterlockedDecrement
EnumResourceNamesW
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedIncrement

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ