62dd2d11c59c1f3f6688969aa58ce1aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62dd2d11c59c1f3f6688969aa58ce1aa_JaffaCakes118
Size

259KB
MD5

62dd2d11c59c1f3f6688969aa58ce1aa
SHA1

d56400e9f31e0f7ae962b2b3739a548471a9f2a5
SHA256

fcac73353dbe3484b8ddc6aa7e2705ca12de1c4f005787ae1d8819da395cd482
SHA512

6343989f91078f498898cc0006f9df2ddebf2df71dea7299d95e904335547e8fa606b027c102fbd29ac720fda1c96dd339e8a15d00bb025490f9befe0d7dc36d
SSDEEP

6144:G8xYRp2MFamdaXZSLOTMGsdOHmsH5FnuDtbHJH5I:G8x2p1LaXZ/gGkO9H5FuBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62dd2d11c59c1f3f6688969aa58ce1aa_JaffaCakes118

Files

62dd2d11c59c1f3f6688969aa58ce1aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32e3c7761ba8f79b132749a3857d230e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

avicap32

capGetDriverDescriptionA

mpr

WNetOpenEnumA

version

VerQueryValueA

advapi32

StartServiceA

shell32

Shell_NotifyIconA

wininet

InternetReadFile

oleaut32

SysFreeString

imagehlp

CheckSumMappedFile

user32

GetKeyboardType

gdi32

UnrealizeObject

winmm

waveOutWrite

wsock32

WSACleanup

msacm32

acmFormatChooseA

ws2_32

WSAIoctl

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 247KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ