214dd5cfe88912ec46839901a7a563af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

214dd5cfe88912ec46839901a7a563af_JaffaCakes118
Size

387KB
MD5

214dd5cfe88912ec46839901a7a563af
SHA1

b4b98a65714d3e3a3302592339d72540e63ae418
SHA256

201e5c577885d019426230efc88ff89985b45ce2b414ebdb6b1c8bf9548ef8ac
SHA512

1c9263e4fa6f6ec543641dc81c4923b2d32e84b098de85d6e00fefc1790e9840d29620490be53f04744d2f88b0a26e582ddc281c7755c3b5053b9927e38efa3b
SSDEEP

6144:C4kl51jZOipjNNEYuEi/ZPJMfZDD3/2snIuS4CpLEB367hAwapILl:Cp1LjrJuEizyDD3M4Cc3I9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
214dd5cfe88912ec46839901a7a563af_JaffaCakes118

Files

214dd5cfe88912ec46839901a7a563af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0848576229808a7eae0a09dd65e6537

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

ReportEventA

mpr

WNetOpenEnumA

wininet

InternetReadFile

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

winmm

waveOutWrite

user32

GetKeyboardType

wsock32

WSACleanup

msacm32

acmFormatChooseA

oleaut32

SysFreeString

ws2_32

WSAIoctl

version

VerQueryValueA

avicap32

capCreateCaptureWindowA

Sections

CODE
Size: 375KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE