14b6887e9daefe9e10a3ff4d98885ca4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b6887e9daefe9e10a3ff4d98885ca4_JaffaCakes118
Size

2.2MB
MD5

14b6887e9daefe9e10a3ff4d98885ca4
SHA1

159b54a74be0093f270e688b2f71c99eb41228e8
SHA256

f1807e3ba6e570a08403923d661a51648566c2b3db7393c9e84a582d95e98443
SHA512

1961e81514718ad094d1717933c8a9dbb3f57ffa299f68bb1df928bf11dff2d84affc03e97436d3e107664e725516fef26aa203e4152beb5ed409fc78a2e0ff3
SSDEEP

49152:7sl+LLRLpU6vY/Aao78NNp9Wq+o1yWtYvUOpBIn1YzZyfCX47TqElNdTQ/yGWIvL:4UBLxY/AL8NNp9twW2vVNLX47VNdc6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b6887e9daefe9e10a3ff4d98885ca4_JaffaCakes118

Files

14b6887e9daefe9e10a3ff4d98885ca4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d46664388691d2c5cd75b11672893a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

version

GetFileVersionInfoSizeW

user32

RegisterClassW

advapi32

RegFlushKey

ole32

CoInitializeEx

shell32

ShellExecuteW

oleaut32

VarUI4FromStr

shlwapi

PathIsDirectoryW

gdi32

CreateRectRgn

urlmon

CreateAsyncBindCtx

userenv

UnloadUserProfile

crypt32

CertGetNameStringW

psapi

EnumProcessModules

wininet

InternetCloseHandle

wintrust

WinVerifyTrust

Sections

.text
Size: 2.1MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE