443e2dbf7947b104ea004d40fa4fe963_JaffaCakes118 | Triage

Sharing

General

Target

443e2dbf7947b104ea004d40fa4fe963_JaffaCakes118
Size

359KB
MD5

443e2dbf7947b104ea004d40fa4fe963
SHA1

1a52905e27f24802e7cef4c78e619cfad54faf11
SHA256

774a7e1404c1f674f51ce2b23fb4eed4b38ebca13e2a296f5e98332ad86980f1
SHA512

0924a6e597a962e426dd45aa62f5576a7e1981b70c0d68637d486373f7a32d4721da0a76e3e16501f8020ccff596dcbe76522283eb3059138dec25f663ad9a9f
SSDEEP

6144:C8n2vzI9WIzUs0ozV7e9BzE7xuh84Opxg4akCWtCv8mYwKZHiaVshNheNUYvKSDH:CmBwkXe9B47t4OpxglnKZHiaChUfXUOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Lol hotkeys.exe

Files

443e2dbf7947b104ea004d40fa4fe963_JaffaCakes118
.rar
Lol hotkeys.ahk
Lol hotkeys.exe
.exe windows:5 windows x86 arch:x86

41de12ff0ec841c18688ffb9663182bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

WSACleanup

winmm

mixerOpen

version

VerQueryValueW

comctl32

ord17

user32

GetDC

gdi32

BitBlt

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

SysAllocString

Sections

.MPRESS1
Size: 284KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
config.ini
dont read me.txt
hotkeys13.png
.png