JaffaCakes118_25865e7d35e0b4518b95071c887f00dc | Triage

Sharing

General

Target

JaffaCakes118_25865e7d35e0b4518b95071c887f00dc
Size

172KB
MD5

25865e7d35e0b4518b95071c887f00dc
SHA1

67d0e05d6aa014b1a5d6ed1ba74362c012249e4f
SHA256

ae8894582479d445288c34d4fe8571f5ff4f064c5c5a0044f6f63244631ee3b4
SHA512

e9f29d35a64204c342684134fde7e6b0f2d0ba9a9db973d2806eaa07bdf28fba6478119bca2edcb53075cce4950689166fd9d294d3ec4c89109f993c01c58680
SSDEEP

3072:bvTDGdtRjfZOsgrJQSwFvSa5XPY+N/u0rKlu+1dMIkDs0QN3lA:SdLhO3JQ1FxXPnDeu+XMI0Qg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_25865e7d35e0b4518b95071c887f00dc

Files

JaffaCakes118_25865e7d35e0b4518b95071c887f00dc
.exe windows:4 windows x86 arch:x86

a074a2e01dd0518df012373e642bcf3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassLongA
CharNextA
GetKeyState
CharLowerA

kernel32

GetThreadPriority
InterlockedDecrement
TransmitCommChar
GetProcAddress
EnumResourceNamesW
ExitProcess
LoadLibraryA
LoadLibraryW
FreeLibrary
InterlockedIncrement

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ