f6e5d5a52ca1eb1a1fbaa09b218e06cc_JaffaCakes118 | Triage

Sharing

General

Target

f6e5d5a52ca1eb1a1fbaa09b218e06cc_JaffaCakes118
Size

388KB
MD5

f6e5d5a52ca1eb1a1fbaa09b218e06cc
SHA1

0425108b439354a1157a067c2d0dba53dc2692fd
SHA256

744e4e826c22d842bce49634a3349463ba83d7c06eef4f1d3febe0b5d08dc559
SHA512

490755e042a79702cdcbdc218c06ede86906b7899462ef6cd7adf915301bde9274835ed278809321bd6af32a77f77fda5b05833eb4b5af7d8d507fab204939a6
SSDEEP

12288:/gAjr04sP1q7NQ1xkLAciX2syZEdYtyH:IP46sZa+isZEdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6e5d5a52ca1eb1a1fbaa09b218e06cc_JaffaCakes118

Files

f6e5d5a52ca1eb1a1fbaa09b218e06cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de5e898af96141209b194030e430692b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mpr.dll

WNetOpenEnumA

advapi32.dll

StartServiceA

avicap32.dll

capCreateCaptureWindowA

ws2_32.dll

WSAIoctl

user32.dll

CreateWindowExA

wsock32.dll

WSACleanup

msacm32.dll

acmFormatChooseA

version.dll

VerQueryValueA

oleaut32.dll

SafeArrayPtrOfIndex

shell32.dll

Shell_NotifyIconA

comctl32.dll

ImageList_SetIconSize

gdi32

UnrealizeObject

wininet.dll

InternetReadFile

winmm.dll

waveOutWrite

Sections

CODE
Size: 375KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE