264a97dd4962750f5b3f3ac76d3314d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264a97dd4962750f5b3f3ac76d3314d4_JaffaCakes118
Size

279KB
MD5

264a97dd4962750f5b3f3ac76d3314d4
SHA1

f78d8034fde2230e85a62d3788505165504635b5
SHA256

03db766cd2b49bb8889f1d792ab4082b98d0d875f19342468887112b06329fb8
SHA512

7919977c8477cd1b1d99b3534e2eb493ef5b9ae663851bbb2f57cf47fb0bb9d9135f1264d54701d3e504434c9f4cd98c389e99cb39d6d85ac514a750071e276a
SSDEEP

6144:M2eSeHufuppNBejhkE72tMJMC+NCnYBBWRM:Mzufa7ej1StmMiYBBM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264a97dd4962750f5b3f3ac76d3314d4_JaffaCakes118

Files

264a97dd4962750f5b3f3ac76d3314d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

397865c786c4c8766a601cbd893174f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

Sections

.text
Size: 269KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE