14927da7dd36354e6891b96b0a4243b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14927da7dd36354e6891b96b0a4243b0_JaffaCakes118
Size

400KB
MD5

14927da7dd36354e6891b96b0a4243b0
SHA1

c9abc1939c8afa776b5d3196569a358a156acf49
SHA256

d1a4d17fcd364de3f00f1f086a9ce45a670ba1d51caaabe63225ad68abe0aab6
SHA512

c5e289f3e67f330041a34f4ccc0f6514b487898c9bcffd2fedfaab9e858193e150494df47996360e814b7a53f717f55efbde74d034175d1196192a41422a7510
SSDEEP

12288:BONGZ9UU8QxCaN2QucpsGZ7wh8L6UqJ2OGp:138Ncj88GUqJRGp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14927da7dd36354e6891b96b0a4243b0_JaffaCakes118

Files

14927da7dd36354e6891b96b0a4243b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6e5d6cd4e60469dbeb2b3d0d2a9dfd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

avicap32

capGetDriverDescriptionA

ws2_32

WSAIoctl

wininet

InternetOpenA

advapi32

RegCloseKey

oleaut32

SysFreeString

imagehlp

CheckSumMappedFile

msacm32

acmMetrics

gdi32

SaveDC

comctl32

ImageList_Add

mpr

WNetGetUserA

wsock32

send

user32

CharNextA

winmm

waveInStop

version

VerQueryValueA

shell32

ShellExecuteA

Sections

.text
Size: 391KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dong
Size: 159B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE