09e5eeb57e9fae2f38f9f5481aa715ea_JaffaCakes118 | Triage

Sharing

General

Target

09e5eeb57e9fae2f38f9f5481aa715ea_JaffaCakes118
Size

158KB
MD5

09e5eeb57e9fae2f38f9f5481aa715ea
SHA1

071ae4fb73c1797ef7f3b8867a07479b8b0b0679
SHA256

b77657cbf63bc54172e1174528b55f9351f5769146db0d92091218eef65d4a68
SHA512

dffcd3bb36643b16d483c5092d4e7f98dc3f2c3c75b5f9e97f0b7622d29738cf77729b0cf24870d34e73632935e12f1d1fa6d1094be8996d425ef1583942c4b3
SSDEEP

3072:9vUCs8lyh+aJDcZ4vJnZVBf0Mhyyx+un5jFXEAfMjm1iv3:OqlylxcZkDf0Hyxp5jOAfT18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09e5eeb57e9fae2f38f9f5481aa715ea_JaffaCakes118

Files

09e5eeb57e9fae2f38f9f5481aa715ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b5b30f6984bd9c3b122a29f64d36044

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

kernel32

GetThreadPriority
GetProcAddress
TransmitCommChar
InterlockedDecrement
EnumResourceNamesW
ExitProcess
FreeLibrary
LoadLibraryW
LoadLibraryA
InterlockedIncrement

user32

CharNextA
GetKeyState
GetClassLongA
CharLowerA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ