663ba094c3d810d144bc7075d30bea96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

663ba094c3d810d144bc7075d30bea96_JaffaCakes118
Size

446KB
MD5

663ba094c3d810d144bc7075d30bea96
SHA1

84670083f0fcc1528298b8d42382e8f19a7127dd
SHA256

884a6b4096613f56fb9f81e78909107de77ffc80eceffc07714d851aa7858172
SHA512

4536991e9a5b710c7f8e727fcfc1071e02d5bf619c3f9e074f3e079352ab5bc8b0b652c64dab540d4a4d2baddb00edf626c105077a272630b57a08f7cd3e2480
SSDEEP

12288:4q4ZU48ZHm2enh2IkYFxbuKhhZ0zp3c9xi7:d4O481ykYxZqc9x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663ba094c3d810d144bc7075d30bea96_JaffaCakes118

Files

663ba094c3d810d144bc7075d30bea96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51d74ae3626a212e596ccdb261a6006b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SafeArrayPtrOfIndex

wininet

InternetReadFile

avicap32

capCreateCaptureWindowA

msacm32

acmFormatChooseA

ws2_32

WSAIoctl

user32

CreateWindowExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

advapi32

StartServiceA

wsock32

WSACleanup

winmm

waveOutWrite

mpr

WNetOpenEnumA

Sections

Size: 434KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE