ea5c72872ee5cfeebcc1a552aad5bfb2_JaffaCakes118 | Triage

Sharing

General

Target

ea5c72872ee5cfeebcc1a552aad5bfb2_JaffaCakes118
Size

362KB
MD5

ea5c72872ee5cfeebcc1a552aad5bfb2
SHA1

98fdc45fb9e036332ca788e0032dd46bbd60f86f
SHA256

1aabeafcf6a95f2ddd56667ec280259dc93af6aa1356a38ca2e60dfd42e51819
SHA512

2d0e6fc5ac53ebb25bd9736e88b1ebb7fe18062d07bc6bb0dce0b91663fee45c628dd5330d058a98385c4a758969a348068340e74cf7dfd25527215fcbc8f137
SSDEEP

6144:UCP+3SNoulLGdFcuNBD99jEm5fU6N+wNrPgPnIPpo5mOa5c28oA:vw8ofYuNB7EmZU6N+wNjgPIp5OaBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5c72872ee5cfeebcc1a552aad5bfb2_JaffaCakes118

Files

ea5c72872ee5cfeebcc1a552aad5bfb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36cbb3a9e53f9e67dd00b1974ab10a1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoCreateInstance

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 340KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE