af224ecf73bf44c9b4f6e9b1664e48ba_JaffaCakes118 | Triage

Sharing

General

Target

af224ecf73bf44c9b4f6e9b1664e48ba_JaffaCakes118
Size

315KB
MD5

af224ecf73bf44c9b4f6e9b1664e48ba
SHA1

8dc84616967933971197a4d51999fbba4a66da72
SHA256

e8c0912b99c005f2bc9358544f2945b28fbb3596e865d2e04405e8599344d999
SHA512

d7b3e761a6491753cf699b18196bad2ff87a117d38e58427ea7931fc38afb7d409e0d97a5e0bce43f218fa01a6615b16fa027315f3de33aa8cc3ff12401ab6e4
SSDEEP

6144:dXDXL0BvnjbJDB7VHMkzQB9qnxcAn/3Rn:lb0BPjb37ykeuxcAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af224ecf73bf44c9b4f6e9b1664e48ba_JaffaCakes118

Files

af224ecf73bf44c9b4f6e9b1664e48ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0c81b6f8530eba9d7b8894954822d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 150KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE