aaa24d15506a2e9542322a6a36bc5d52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaa24d15506a2e9542322a6a36bc5d52_JaffaCakes118
Size

621KB
MD5

aaa24d15506a2e9542322a6a36bc5d52
SHA1

296672d79dccf64bd5f047f7c1ba2c70b4ca0e47
SHA256

8ff84ddc818c1e02ae7a8dfb540b71bf6d0a7af79132b7b35219bb57ec54d5b2
SHA512

d5a5d95d3b91c8904f30c4777476dd72ec69bc938c1eba77a7a254108ec86d615ba86b490bbbfe6c40030657e83c58075386ab602929b4932e67d592ad821a22
SSDEEP

12288:QgGWFZCGYipPLvOJ4VuCsFa46a6gGWFZCGYipPLvOJ4VuCsFa46a:cWFZCkzOKrsFaXWFZCkzOKrsFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaa24d15506a2e9542322a6a36bc5d52_JaffaCakes118

Files

aaa24d15506a2e9542322a6a36bc5d52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

070f33103d580ac41ef402b059333833

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MessageBoxA

advapi32

RegQueryValueExA

ole32

OleRun

ws2_32

socket

shlwapi

PathFileExistsA

dnsapi

DnsQuery_A

shell32

SHGetSpecialFolderPathA

msvcrt

sprintf

oleaut32

VariantClear

Sections

.text
Size: 286KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE