70e6fb71a7e7b8ea7dc890b5ebc48312_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70e6fb71a7e7b8ea7dc890b5ebc48312_JaffaCakes118
Size

1.8MB
MD5

70e6fb71a7e7b8ea7dc890b5ebc48312
SHA1

ec637fad35fa18aa713e555964d719a8823368db
SHA256

64bbc790072480fb23bffc424699a0238b7521880824bc85ce32b0d5683de9bf
SHA512

d9e47a53a771113e8df21bb92300096f00db42b1570d79bd9bf85947ba482501ce8339d25bed4dd3d53d260757dbf42436c95f8dedf42e895fec143866600a54
SSDEEP

49152:8/uyXvBkPj94qagZzycJ1NIIGEBcsM0ByrjisZ6:jyej94qxZzJIFEBc5KIFc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70e6fb71a7e7b8ea7dc890b5ebc48312_JaffaCakes118

Files

70e6fb71a7e7b8ea7dc890b5ebc48312_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f7d48182a94446273a59d96c0e69048

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

advapi32

RegCloseKey

dinput8

DirectInput8Create

dsound

DirectSoundCreate

gdi32

DeleteDC

imm32

ImmIsIME

shell32

ShellExecuteA

user32

GetDC

winmm

timeGetTime

ws2_32

WSASend

wsock32

recv

d3d8

Direct3DCreate8

snmpapi

SnmpUtilOidCpy

Sections

CODE
Size: - Virtual size: 14.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE