d009296f1991cd6e2002e17c1a3a4f7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d009296f1991cd6e2002e17c1a3a4f7c_JaffaCakes118
Size

315KB
MD5

d009296f1991cd6e2002e17c1a3a4f7c
SHA1

8dc7a99df3f0bd65cc011a6911a00d6a43b0c2e5
SHA256

1cfa2f81d3a13894823c13510a6d6332171f0a508b585a0e027b029b3e47b920
SHA512

6e6d555826e70f4a9657303919a98575b68ac516e599c7b0b2eefb1f3b670afc2faecb3f2d0520449f90664223be85926ac4f4e022dc57d45912dcb012bc7aab
SSDEEP

6144:9XDXL0BvnjbJDB7VHMkzQB9qnu8c/3Rn:Fb0BPjb37ykeuf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d009296f1991cd6e2002e17c1a3a4f7c_JaffaCakes118

Files

d009296f1991cd6e2002e17c1a3a4f7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0c81b6f8530eba9d7b8894954822d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 150KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE