460558ec7bf7ebaf14154168f98b1ec2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460558ec7bf7ebaf14154168f98b1ec2_JaffaCakes118
Size

357KB
MD5

460558ec7bf7ebaf14154168f98b1ec2
SHA1

1c0e27ab8d07e7133e136ab4e9d6539d85d2bb44
SHA256

67e0c7c5fbb9a6d2e3bbda6e20b904c49e2f0b3cd4bce7ffbda58f30d6e89574
SHA512

dd01fc2240f8e8bfe4e19c98ac5a692b48ddf1f6d57653b7cc751504d2d316e95939012b59dffd1ce046e9f479932cc3595a564b4cbb8dac864d39e0a4223c29
SSDEEP

6144:rOvwS/9L4bKoSR7QgehA18JfBl10hsQe6+Me25m5Gq4xgZK2h4Duzk:ew6985gvmPl10++5m6gcA4Duzk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460558ec7bf7ebaf14154168f98b1ec2_JaffaCakes118

Files

460558ec7bf7ebaf14154168f98b1ec2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9051e69f393773029586a5fdd3d2a32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

kernel32

GetThreadPriority
FreeLibrary
TransmitCommChar
GetProcAddress
EnumResourceNamesW
ExitProcess
LoadLibraryW
LoadLibraryA
InterlockedDecrement
InterlockedIncrement

user32

CharNextA
GetKeyState
GetClassLongA
CharLowerA

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ