14ad8fc86215e09645b15860d364c18b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14ad8fc86215e09645b15860d364c18b_JaffaCakes118
Size

178KB
MD5

14ad8fc86215e09645b15860d364c18b
SHA1

eb1278aa73980bef5addff7a18db3eb867180484
SHA256

061484ac72fa8823e96896a31846dcbb57beeb9a279adfd8e306dc4583b40ddf
SHA512

a8bd46b4e5f7abb4163119631793428fde481522131ac7fa1ef90f6743ec8b4c346ab809bb1240f1cef7eab51e9bb8cf0ea0a85c64ec2ff7b9e1b1dc26316bae
SSDEEP

3072:WxQ1A59chgrlJK07KGyvf4SpU6FDKMXodGZnWkIoUDVJv3P:WiI9cGK026teZDQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ad8fc86215e09645b15860d364c18b_JaffaCakes118

Files

14ad8fc86215e09645b15860d364c18b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f435416ac2be5b960403ef9075780b63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

winmm

PlaySoundA

Sections

CODE
Size: 134KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE