0601ac40c2eb69facc95ebe60502d0f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0601ac40c2eb69facc95ebe60502d0f4_JaffaCakes118
Size

163KB
MD5

0601ac40c2eb69facc95ebe60502d0f4
SHA1

27541d21032ab20ec969d2f5ab94e747282dc0fa
SHA256

b03ebcaed712df93b9ceffa96b62ee9a448aaaa0747030d93be7c9853296dd66
SHA512

b49c78a307b04885ca4cd7f04a02591e494d8981f53bf754fd5a512509663a011af5c1194231ab336ff252dcba5657f1b446a5d2d626348d579b9d3c8ae43392
SSDEEP

3072:DvcETOili34nO5mv/hDSZlVzMfhHppCP2KMUYTeOzxK4PMEFxNDopB7StCtAneFm:oEyiAIOIv/hOZnChZKMUOz84PMixNDoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0601ac40c2eb69facc95ebe60502d0f4_JaffaCakes118

Files

0601ac40c2eb69facc95ebe60502d0f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2428a838c19096694829993a14e680f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
InterlockedDecrement
TransmitCommChar
GetProcAddress
EnumResourceNamesW
ExitProcess
FreeLibrary
LoadLibraryW
LoadLibraryA
InterlockedIncrement

user32

CharNextA
GetKeyState
GetTopWindow
CharLowerA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ