f7377952850d2c037eba4a60bc701267_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7377952850d2c037eba4a60bc701267_JaffaCakes118
Size

188KB
MD5

f7377952850d2c037eba4a60bc701267
SHA1

6b9b760977d132951471d2542076f8eb3f69441e
SHA256

f0bc305c175b434dcc658329b22fcef327fd5c6427c839be0ebfa5ff0a26b9c7
SHA512

a17c5b1283c13a33feada66bc9ac613fd1349d1980bc3703f45fff1d60d61b6941a335404ae6e2ef608f46455346bcf0cc0dce4bf3525b831e65f3a214600bb2
SSDEEP

3072:siHX3xl7QfyrsazClgvzbwUosoBy+mvKVEm+0h+hgvC3BBfDSXpshZf+VeK:Zn7QKrElcwjwhgvqBZZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7377952850d2c037eba4a60bc701267_JaffaCakes118

Files

f7377952850d2c037eba4a60bc701267_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6bacabb7a4dc06885b1d9cced6a81e14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyaddr

winmm

timeBeginPeriod

comctl32

InitCommonControlsEx

user32

EnableWindow

gdi32

SetBkColor

advapi32

RegDeleteKeyA

ole32

CoCreateInstance

oleaut32

OleLoadPicture

Sections

.text
Size: 151KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE