9580ca3958d3e15b8a51b5c094a607e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9580ca3958d3e15b8a51b5c094a607e4_JaffaCakes118
Size

1.7MB
MD5

9580ca3958d3e15b8a51b5c094a607e4
SHA1

91e95aa1eb6b8213e6b6e2661df839da998cc4e4
SHA256

b1353f40d71aa020f543e454149a1b6ce39955ea6900f5fd33ad6e303dda634d
SHA512

59c919bdde4af17a1212374cac71fc108299476eb9a7263e01f831a223166f4bdbf5dabe1d90b33bf865d0333409aafea9de58081a6caca3a6606b53e290f171
SSDEEP

24576:TcKHFDJKZ8GbbwQ0RrZvLr/jRwOgP7L0a5OjWITiR2Q4OJgq9ro73QHfRjNTIZQ5:T1uiW7mV9ZgP7LqWdRNJ7ro73QHnVke3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9580ca3958d3e15b8a51b5c094a607e4_JaffaCakes118

Files

9580ca3958d3e15b8a51b5c094a607e4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4d0c6336bb8a7b2ffa48376818f2c339

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegQueryValueExA

user32

GetKeyboardType
CreateWindowExA

kernel32

GetACP
TlsSetValue
lstrcpyA
Sleep
IsDebuggerPresent

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

msvcrt

malloc

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 910KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ