198d7f01d544ecfb2ca54a6f2114b208_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

198d7f01d544ecfb2ca54a6f2114b208_JaffaCakes118
Size

95KB
MD5

198d7f01d544ecfb2ca54a6f2114b208
SHA1

f615c2886a6f9060739c647c586342ef03aba8c1
SHA256

225a658236aecb9b93f63f83cd5aa5e6a46ec9300d95e2c507b05491e6bc4654
SHA512

34fd2a2eb466fa7c502921bcb095febefde31198506ceb4c255f086cf62a8c50cfdb35090ca1dc049c90bf5f7ac888a1a4dcabf40d66928aa917b61f389b08ef
SSDEEP

1536:ii0YmogHJiTbM1uF7t0mg3j+bgyMMret34fznA2VMwyoqT+4/Jv/MeiZx7q:NmogHJOtktVSJA296v/MeiZx7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
198d7f01d544ecfb2ca54a6f2114b208_JaffaCakes118

Files

198d7f01d544ecfb2ca54a6f2114b208_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b1a34ef1df118c662306fe7c00782ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

RegisterClassA

winmm

midiStreamOpen

msvcrt

malloc

version

GetFileVersionInfoA

ws2_32

WSAGetLastError

Sections

.text
Size: 90KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE