0824382ab08ab7681ec676e9ec2d9df7_JaffaCakes118 | Triage

Sharing

General

Target

0824382ab08ab7681ec676e9ec2d9df7_JaffaCakes118
Size

176KB
MD5

0824382ab08ab7681ec676e9ec2d9df7
SHA1

dbe59a03ea49d0c60e90c3222f5e434d0b462d71
SHA256

033a162d0902421fb63a3518516d029a0b04fe9ecb903bdf599367c88b9aeaf9
SHA512

44232bafcac82c61af315bdbac69baf5e90d6d7dd366ab47d823627e17ae55f83101e5c5032c2fc6d5103bb3ca27ef6b0d4f0ec64156750dab23dc0757e0836e
SSDEEP

3072:2T9fD/rtE6vRGridFFVCa1uxyk0I/i8EoF92cpvbl227S6UgkJ:U9flXZGrf9yknAcpb86UF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0824382ab08ab7681ec676e9ec2d9df7_JaffaCakes118

Files

0824382ab08ab7681ec676e9ec2d9df7_JaffaCakes118
.dll windows:4 windows x86 arch:x86

09d5b3958fc1cd5f74f04022592812f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetProcAddress
LoadLibraryA

user32

ClientToScreen
GetWindowLongA
GetCursorPos
SendMessageA
GetWindow

advapi32

RegDeleteKeyA

Exports

Exports

AppleWIaudio

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ