JaffaCakes118_77113ccb7daef63288a4b67f481a0898 | Triage

Sharing

General

Target

JaffaCakes118_77113ccb7daef63288a4b67f481a0898
Size

159KB
MD5

77113ccb7daef63288a4b67f481a0898
SHA1

26cf54642f629acc6746000830e4d835ba9fb97f
SHA256

56ded3162461dac583b7a58b101734cc264a429b6f745fb3dc9331c6e5fb9992
SHA512

8ed412ca863b3e86452a4342a802b8542f0ed6d904b13555363a6f28b54c2c862e0e4224639a15729768604ead8d397ea5642289f7204416336a7baf2a770be2
SSDEEP

3072:phQF6Mkng3ebcRlYE95SJjYcLCeJaKbWkCbV9iuw9Ccjxrmqf9WsrcZ:piFCwlyE9WTCeJaixUVDjcjxrmqAsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_77113ccb7daef63288a4b67f481a0898

Files

JaffaCakes118_77113ccb7daef63288a4b67f481a0898
.exe windows:4 windows x86 arch:x86

554e93a5f11fd0b6a87706471daa2233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfW
CharUpperA
GetTopWindow
wsprintfA
GetKeyState
CharNextA
CharLowerA

advapi32

RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

kernel32

GetLastError
SetEndOfFile
CreateMutexA
GetThreadIOPendingFlag
GetModuleFileNameA
WideCharToMultiByte
IsBadReadPtr
TransmitCommChar
FlushFileBuffers
CompareStringA
GetTempPathW
LoadLibraryA
EnumResourceNamesW
LoadLibraryW
CreateFileW
FreeLibrary
GetProcAddress
ExitProcess
CompareStringW
CloseHandle
InterlockedDecrement
WriteFile
MultiByteToWideChar
InterlockedIncrement
SetStdHandle
SetEnvironmentVariableA

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ