JaffaCakes118_098490ce23ae57ebdecaa3ff542602a6 | Triage

Sharing

General

Target

JaffaCakes118_098490ce23ae57ebdecaa3ff542602a6
Size

190KB
MD5

098490ce23ae57ebdecaa3ff542602a6
SHA1

de3e9ca821fca772fdef03cebcc8130a84a8a48d
SHA256

a66f96b9d5d54443101edac80b7d49db6f4ad755cf21bd1521a5aa76e5245cc1
SHA512

d450517f313a2771a966c808990a8d6633b86c34de1261ddfc78841c2920e583ce81c073ccbb309afe70127d7e4aae67f679e9af661f8aae22f1d2d314bb4654
SSDEEP

3072:FvvCIrf5ZOoxFWvVtgOEzhMCxjCoKbHkD5YvbCMxQpJ8EvHGUyp3YvL8hoceInXC:9CRQFJPx+oCvmKQNHvwZhocj+h3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_098490ce23ae57ebdecaa3ff542602a6

Files

JaffaCakes118_098490ce23ae57ebdecaa3ff542602a6
.exe windows:4 windows x86 arch:x86

931c89dfcface1d272e4a1a50eb7214c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

user32

CharNextA
GetClassLongA
GetKeyState
CharLowerA

kernel32

GetThreadPriority
GetProcessHeap
SetCommTimeouts
VirtualAlloc
EnumResourceNamesA
ExitProcess
FreeLibrary
LoadLibraryA
GetProcAddress
VirtualFree

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ