5a0d4502f29b1bfcf2159c23722f3cfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a0d4502f29b1bfcf2159c23722f3cfa_JaffaCakes118
Size

349KB
MD5

5a0d4502f29b1bfcf2159c23722f3cfa
SHA1

2d6a4be7697b69c97147a403a4c42390b98fd2fa
SHA256

b83fc68e25d8858ab21505357086c5fa087db4c1951e6952c53e9780cd63d2df
SHA512

5217201341545f8757ae5ef894940043323a8f612225806a245248d2ed537805116e23a3080202e85081864a1981ab06a24b5177958051b53a107adabb121816
SSDEEP

6144:iU2YGNWsT7ESmr24tnjFoFfKuc557k7Ejhbt63Kpgr3zzhQDpN5:mAr/tRoctk7H3KK3z0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a0d4502f29b1bfcf2159c23722f3cfa_JaffaCakes118

Files

5a0d4502f29b1bfcf2159c23722f3cfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc45dcc00029fe978018b29df58cd6e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

winmm

timeGetTime

wsock32

WSACleanup

Sections

.text
Size: 332KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE