3274eac2d87e9b04acf19ffb5821dcb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3274eac2d87e9b04acf19ffb5821dcb8_JaffaCakes118
Size

435KB
MD5

3274eac2d87e9b04acf19ffb5821dcb8
SHA1

939ecf7773f7676b377008256c289fb8ff1cc44e
SHA256

043022bf8a5ee6a1755f3c268ee47b6c111dfd6ad6bc5f2d23d27472c09b4b0c
SHA512

da566ffc06486cf5b9d94d5c989dc2d737522caae0eaed362fa7d854c2bac97e72167082f72949dbb0f6ee68a6bc718d70121ad14b3296c665d1dfa197950adc
SSDEEP

12288:FVxkthHSH3zniVm9ovlwpqkMU9o1K1GGmcvnTI4sq:zxQObiU9oNxl9CGG5fTIZq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3274eac2d87e9b04acf19ffb5821dcb8_JaffaCakes118

Files

3274eac2d87e9b04acf19ffb5821dcb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56c9c16006c511b7e6d5c475080fb6e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

winmm

waveInOpen

avicap32

capCreateCaptureWindowA

msvfw32

DrawDibDraw

wsock32

send

urlmon

URLDownloadToFileA

Sections

.text
Size: 426KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dong
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE