064784a3a1521b3486de8e8b73b76dc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

064784a3a1521b3486de8e8b73b76dc2_JaffaCakes118
Size

262KB
MD5

064784a3a1521b3486de8e8b73b76dc2
SHA1

5faf1bcc8b66bd087080c80936eb9f75b24d789d
SHA256

a823e67b88439fbf9c6f000fa0ad04d5ba5235448d6929639a2114f4d1334bb5
SHA512

da6e3a2b2f7c58117ff300ef7df9fd9e5b0c0d4e5a4fb1000160cc827aceed57e3af0ab58e14a8faed3f49b04cf42662e781875f471cd4c4fb4c0bde46c8a1bb
SSDEEP

6144:BEiKeTv2R++fUgHa77Q3dcTUAbXr++fgFpL9YFDPHEZ/MEN4OT:iiKerAjakMdfsYFDPH2EETT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064784a3a1521b3486de8e8b73b76dc2_JaffaCakes118

Files

064784a3a1521b3486de8e8b73b76dc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e8959352d4e4bc7c11ff6612341c91d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoCreateGuid

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

winmm

waveOutRestart

Sections

.text
Size: 251KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE