af4205ef6e85945ad3f42f20e9a788af_JaffaCakes118 | Triage

Sharing

General

Target

af4205ef6e85945ad3f42f20e9a788af_JaffaCakes118
Size

21KB
MD5

af4205ef6e85945ad3f42f20e9a788af
SHA1

2ab7ac3b2402d79164bb4a775bff5320f1106fc0
SHA256

2ea09b8bc09168726e2d744513567cb3bdf1945368bfdb26dc3e1a72351e8129
SHA512

1df5c1b47aee53926cc22fadda5026ebfd77c42a5adc28079ae88fdb6feb3a5a4ee6a42c319161a5d61927400bb6bb9e3087494865d45c2b9f83745131c4a570
SSDEEP

384:htvLw8JkdSfSS+kdkkKWlx2IsGDUUxPsROqDCBim9gYdPpWT:h28Olkdkkr0n8UUaROqD61U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af4205ef6e85945ad3f42f20e9a788af_JaffaCakes118

Files

af4205ef6e85945ad3f42f20e9a788af_JaffaCakes118
.dll windows:4 windows x86 arch:x86

62cd6edd5ab78906b318a1761eea9aed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wininet

InternetSetFilePointer

user32

SetTimer

gdi32

BitBlt

advapi32

RegCreateKeyA

shell32

ShellExecuteA

Exports

Exports

DecrementTrial
GetLicensee
GetPurchaseURL
PauseTrialCountdown
TrialsRemaining
_DoExitPopup@16
getTrialString
isTrial
mainDLLInit

Sections

.text
Size: 16KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE