83dc56c9283600d1f25e645ed2eb576c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83dc56c9283600d1f25e645ed2eb576c_JaffaCakes118
Size

219KB
MD5

83dc56c9283600d1f25e645ed2eb576c
SHA1

86f13783f504a94aeb63240a8e55bbb67bf0734c
SHA256

5ec7c5707b8da0a9266b3d854c4ef55ecbe46e4d25adac1baefcf7a771eeddbc
SHA512

94205a46e2d39570277377dc59b60b6618387d98dc24a0dcb2b3d17cfd097d6db9deb68449f41a379369ae249eae18985bc77a00f362320f8b98b7d965e9b94a
SSDEEP

6144:4Ei5QLLJA4ian90t4tO4LwFSmblqJhrSwMG9sWxDa7oBl4:229ig6iOKwFhlqJhrnrsWxDBr4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83dc56c9283600d1f25e645ed2eb576c_JaffaCakes118

Files

83dc56c9283600d1f25e645ed2eb576c_JaffaCakes118
.dll windows:4 windows x86 arch:x86

890241d16b6e459064661812fe96c0cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

WSACleanup

ole32

CoTaskMemFree

wininet

InternetReadFile

urlmon

URLDownloadToFileA

user32

GetForegroundWindow

gdi32

CombineRgn

advapi32

RegCloseKey

shell32

SHGetFolderPathA

oleaut32

SysAllocString

Exports

Exports

Always
CallByControl
FKingSoft
GetPlayerVersion
Stop
playAda

Sections

.text
Size: 208KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE