4b2d088832bd3fae477f9585bd312cb5_JaffaCakes118 | Triage

Sharing

General

Target

4b2d088832bd3fae477f9585bd312cb5_JaffaCakes118
Size

16KB
MD5

4b2d088832bd3fae477f9585bd312cb5
SHA1

8e093e28bcfc27e81ba8e1ba7dd5b7f7075f9dae
SHA256

d5e90f060b24e259adc85756e78c29734fe7a25d8fa68e460b662728d5126293
SHA512

73af01750c26d843b568bfe3310c16afb73bebd20913d69b120f2c88b5a50676c302aaab2e0ac7e3c2084d650be27182548592c1665c8784446b6a18d30117cf
SSDEEP

192:2INcCKgWiKeg/E1AsVmaughQVmVMb/TH9+yDUigil7WnoIF:2IN53Kl8AsVmBghS66/Td+yDUigB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b2d088832bd3fae477f9585bd312cb5_JaffaCakes118

Files

4b2d088832bd3fae477f9585bd312cb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c4bdb54820d1d361a6025212a1d4e01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3d8

Direct3DCreate8

kernel32

LoadLibraryA
GetProcAddress
GetTickCount
Sleep
ExitProcess
ReadFile
OpenFile

user32

GetAsyncKeyState
MessageBoxA
GetSystemMetrics
ShowCursor
CreateWindowExA

ole32

CoCreateInstance
CoInitialize

winmm

PlaySoundA

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE