09572e5c451f96f5245732b4fc4a276f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09572e5c451f96f5245732b4fc4a276f_JaffaCakes118
Size

188KB
MD5

09572e5c451f96f5245732b4fc4a276f
SHA1

2bc6b3d00e1407adcbe0886f099bf8a6964e9681
SHA256

9b6c3e9fadc695a8144bc019c48881853ca8bf26f51c9336e2de8a3f09f6981b
SHA512

ebea9edd9f58f9f780dde16391a6e0f7e5f1a5b8578f04690fd248d31f1316337513568b78459e057cf24648868578ca7e31038383e2dc9296b873fdaa18ffb9
SSDEEP

3072:PvwsDTU1DhPOE17hz/GQmxDNrm2ky9hcTU3AWjTNDHaOIGkpZKlI9f9AIJ+jpsN:NG9POYhCQANrxky9h/3AWdWhNpfrcuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09572e5c451f96f5245732b4fc4a276f_JaffaCakes118

Files

09572e5c451f96f5245732b4fc4a276f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e3bc897f0f51bc94a53bdb7779ce198

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

user32

GetKeyState
GetClassLongA
CharNextA
CharLowerA

kernel32

GetThreadPriority
GetProcAddress
SetCommTimeouts
LoadLibraryA
EnumResourceNamesA
ExitProcess
GetProcessHeap
FreeLibrary
VirtualAlloc
VirtualFree

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ