JaffaCakes118_c8cc657d5b2f5a6737635342f82ef4ad | Triage

Sharing

General

Target

JaffaCakes118_c8cc657d5b2f5a6737635342f82ef4ad
Size

178KB
MD5

c8cc657d5b2f5a6737635342f82ef4ad
SHA1

e6acebcfc8c16c84f0a7d7b301e9aaf215f312ec
SHA256

7890809eba55bba024979ed3d6705a775f8220d7963fba9c8906dafbbe7faf52
SHA512

ea3abcdd0cec56f6a41178bebc9328222e28ad8d8601295d9f6ba0b21216c21061a20cca2a108552290501d28e0849cc34cb56d505251f96b4887431120cef58
SSDEEP

3072:3vTe4ucH1Bva4KYN+PQWo1HSpd6/JmWgCmABVJDGYgt4gQl7d6QR:CncH1c80YYopmADJDbgOgQl7IQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_c8cc657d5b2f5a6737635342f82ef4ad

Files

JaffaCakes118_c8cc657d5b2f5a6737635342f82ef4ad
.exe windows:4 windows x86 arch:x86

4ae14f8a35a3db0e186b69f73634ee96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

user32

GetKeyState
GetClassLongA
CharNextA
CharLowerA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

kernel32

GetThreadPriority
LoadLibraryW
TransmitCommChar
GetProcAddress
EnumResourceNamesW
ExitProcess
LoadLibraryA
InterlockedDecrement
FreeLibrary
InterlockedIncrement

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ