JaffaCakes118_aef3c46fc5194fd2579c8439e6f421bd | Triage

Sharing

General

Target

JaffaCakes118_aef3c46fc5194fd2579c8439e6f421bd
Size

180KB
MD5

aef3c46fc5194fd2579c8439e6f421bd
SHA1

e37823f80ea0edca760700b87319565141330be2
SHA256

4e147b0195c3cbf5ae2870e3db47028e908cb3f852c238deb23f7f153341d25b
SHA512

cb409c50c8d450ea001887c37b071d3ec04f49bbbf586eb56b051679e5cb49117ace359f024e766a686c386980b32cdd3fac17000ef52fd87150178376764572
SSDEEP

3072:ovRenhKp26TzHp0R8WS5PvfENU6gzpnG9BrxNC/Ab5ReE0Q+IUBauCVa8mocC97s:5hA5zJ0R8WS5HMlgzpGTeQ5r0Q5UBa7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_aef3c46fc5194fd2579c8439e6f421bd

Files

JaffaCakes118_aef3c46fc5194fd2579c8439e6f421bd
.exe windows:4 windows x86 arch:x86

c836906c02b1532bdbaa0c0b42bb9bc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
LoadLibraryA
SetCommTimeouts
FreeLibrary
EnumResourceNamesA
ExitProcess
VirtualAlloc
GetProcAddress
GetProcessHeap
VirtualFree

user32

GetKeyState
CharNextA
GetClassLongA
CharLowerA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ