2329fc4dbdbd41e32fa0866d817d51a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2329fc4dbdbd41e32fa0866d817d51a9_JaffaCakes118
Size

367KB
MD5

2329fc4dbdbd41e32fa0866d817d51a9
SHA1

b4d5dbd229643c73dfeccf6348b10110cde7d7ab
SHA256

91839dd446aaa0274422a19453c4ffd6e5c50192aaac1668bedd1b3de21bc511
SHA512

cabfb37869b438f39da81d9ddea3872692a26fe7918fe6d4dad9fbc1b202bf3b4b848462ab7dd33e84369eff9e2c1d8418151483aafedfb0eebe6217281fa4a0
SSDEEP

6144:39KmiDvs2490wwUUpD8w6Zjsx1GMtAl5AvwUWt/22VvnHSMRIwWJMicMgDjmo:3mDkzh8T6Zj/Mtk5Un2VvXWJMim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/skr.exe

Files

2329fc4dbdbd41e32fa0866d817d51a9_JaffaCakes118
.zip
Smart.Keystroke.Recorder.Pro.v3.1.Cracked-F4CG/crack.zip
.zip
skr.exe
.exe windows:4 windows x86 arch:x86

65918dc76bca98d6b3f7161888820a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

version

GetFileVersionInfoA

hhctrl.ocx

ord14

user32

DeleteMenu

gdi32

SetMapperFlags

comdlg32

CommDlgExtendedError

winspool.drv

GetJobA

advapi32

RegCloseKey

shell32

SHGetFileInfoA

comctl32

ImageList_GetBkColor

shlwapi

PathFindExtensionA

oledlg

ord8

ole32

WriteClassStg

oleaut32

LoadTypeLi

wininet

HttpOpenRequestA

emailhelper

?SendTestMessage@@YAHPBD0000@Z

Sections

.text
Size: 349KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Smart.Keystroke.Recorder.Pro.v3.1.Cracked-F4CG/f4cg.nfo
Smart.Keystroke.Recorder.Pro.v3.1.Cracked-F4CG/file_id.diz
keygen.nfo