4bc9d54b27f775d8620fe534e1ba89c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bc9d54b27f775d8620fe534e1ba89c4_JaffaCakes118
Size

405KB
MD5

4bc9d54b27f775d8620fe534e1ba89c4
SHA1

1af9a59a9bc2c4ee8e7e9f12dbc46e27ef86c7bd
SHA256

01c71ec055ca4ba34ac8f13bd3d49b4e2f3bd49bba8e97355a265f1ade63eb7b
SHA512

43baccda83d35073d28a4689aef46e97988d6b88121ed1dc447e5737db58ed89e3acff50b46aa501e2c1a41d29e531e27291dc6dadef7f79303378d9e5896fdb
SSDEEP

12288:LgAjr04sP1q7NQ1xkLAciX2syZEdYtyH:kP46sZa+isZEdu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bc9d54b27f775d8620fe534e1ba89c4_JaffaCakes118

Files

4bc9d54b27f775d8620fe534e1ba89c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de5e898af96141209b194030e430692b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mpr.dll

WNetOpenEnumA

advapi32.dll

StartServiceA

avicap32.dll

capCreateCaptureWindowA

ws2_32.dll

WSAIoctl

user32.dll

CreateWindowExA

wsock32.dll

WSACleanup

msacm32.dll

acmFormatChooseA

version.dll

VerQueryValueA

oleaut32.dll

SafeArrayPtrOfIndex

shell32.dll

Shell_NotifyIconA

comctl32.dll

ImageList_SetIconSize

gdi32

UnrealizeObject

wininet.dll

InternetReadFile

winmm.dll

waveOutWrite

Sections

CODE
Size: 375KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE