9e650ebe1f98f3d263a6da174c98b14e_JaffaCakes118 | Triage

Sharing

General

Target

9e650ebe1f98f3d263a6da174c98b14e_JaffaCakes118
Size

182KB
MD5

9e650ebe1f98f3d263a6da174c98b14e
SHA1

af1c67d5bce5346e668ce1e1bdba050b53f9de77
SHA256

b33d5c427d5a4218d80ffb5e6385d52fe2ba5a3e7b1042d4b87f8946ff3e2798
SHA512

cec9e29da0b057342f9958a908b03e905a56136dadb2c5f49f088fbb948bfa2d7272382a6a01803ce219c0a5a7c39a047d7afead0eef27ec3429bf7e23ae55d5
SSDEEP

3072:SvQFgZstVrL4m7LlJSWuFwexJwA0vv9Baee/jdA4+wR/6R44w/TkiWDLjtIv:J505WuaexSt94xWMwR44w/4TPjty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e650ebe1f98f3d263a6da174c98b14e_JaffaCakes118

Files

9e650ebe1f98f3d263a6da174c98b14e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9eb5770fdec8e7d1b142c36e0d71e2ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

user32

CharNextA
GetKeyState
GetTopWindow
CharLowerA

kernel32

GetThreadPriority
InterlockedDecrement
TransmitCommChar
GetProcAddress
EnumResourceNamesW
ExitProcess
LoadLibraryA
LoadLibraryW
FreeLibrary
InterlockedIncrement

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ