c008725cf5f239b582991e36f388b479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c008725cf5f239b582991e36f388b479_JaffaCakes118
Size

253KB
MD5

c008725cf5f239b582991e36f388b479
SHA1

82b3946693338135a6c5195eeb6cfa23489ea138
SHA256

4dcc0a0cb8110cf089aef52d39c113a27b938084cf814e4eaa654285568994f8
SHA512

3d17b4be26cd0ecf11e5b954018849da0fad347edadab7c3d24c01c29e7277c879b40a433d05035655ae7ff061b62dcbfff04d76b58a9a7b1e1b253e33d40e94
SSDEEP

6144:mFuR0HXLU22YQZYCsEsqDnsna3WrmhLc5kzbI9Up:uuubDyYCXDnsHyACbIKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c008725cf5f239b582991e36f388b479_JaffaCakes118

Files

c008725cf5f239b582991e36f388b479_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0458f82e58ed797644b58acec69380be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

comctl32

_TrackMouseEvent

gdi32

UnrealizeObject

oleaut32

SafeArrayPtrOfIndex

user32

CreateWindowExA

version

VerQueryValueA

winmm

timeGetTime

Sections

.text
Size: 237KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE