62e24ee0d3509383b2f80b3e5be214b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62e24ee0d3509383b2f80b3e5be214b0_JaffaCakes118
Size

391KB
MD5

62e24ee0d3509383b2f80b3e5be214b0
SHA1

de97db71111d84ad5a5685d550d2ab2d75997016
SHA256

cecd8eaec67afdc94f4be17a18f8cf52b847fe5df499559fa84083a0405dcb29
SHA512

f4ee672edb544db7504bf982e881336fee0dfcb592c306e43803a95b28b39005adeed8428b4fd173c6b99762e13179c588a2085e7169b8690074dcfec3362714
SSDEEP

12288:9DMYzizJ8wBWtAeBvBuorkv5EXHNFtW8l9:9DMr8aYABorkvu9l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62e24ee0d3509383b2f80b3e5be214b0_JaffaCakes118

Files

62e24ee0d3509383b2f80b3e5be214b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae6014fd8eee0cdee350abc158c119df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shell32

Shell_NotifyIconA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

winmm

waveOutWrite

ws2_32

WSAIoctl

avicap32

capCreateCaptureWindowA

msacm32

acmFormatChooseA

version

VerQueryValueA

mpr

WNetOpenEnumA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

wininet

InternetReadFile

Sections

CODE
Size: 371KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ