a99fff1e28440eb1e80ea21f64170698_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99fff1e28440eb1e80ea21f64170698_JaffaCakes118
Size

393KB
MD5

a99fff1e28440eb1e80ea21f64170698
SHA1

156575d6508fe3a870d16d9b8ab3c9598d0681bf
SHA256

e6f8177a5b1f8b61aefae22204bff057fbf2f4b665b039870c7b83e7714eff7d
SHA512

2d6e1714c09c736f2412f2ef624fc7c967060f28a6040a20e4dc7c335653f1e86556ba1196dc02d7612e439bba1301242d90c0e6321533727e9b06c26693d04c
SSDEEP

12288:FiMltvNQSke3/hW+N4f8uhNQTCZScY38nSIP:FLltvNQSO+Wf9l4R3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99fff1e28440eb1e80ea21f64170698_JaffaCakes118

Files

a99fff1e28440eb1e80ea21f64170698_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e263e0375780ba8ceaf3069db80e0da8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoCreateInstance

comctl32

_TrackMouseEvent

comdlg32

GetOpenFileNameA

winmm

sndPlaySoundA

Sections

.text
Size: 345KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE