8b79e1dc9ec5e60278b034232afb4f4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b79e1dc9ec5e60278b034232afb4f4c_JaffaCakes118
Size

523KB
MD5

8b79e1dc9ec5e60278b034232afb4f4c
SHA1

acff44a929a8419f801599b9bd2854e27460cb69
SHA256

5afafbd14cb49fc5495f6769ac5ab4e9b4790a9a14a48c4aa7ceaa5a7b477606
SHA512

3ac900747641b638daf5b1d7feae94786c354868b510cfa183bb89ec2db5c40522028be874e434432175200b56d42f24a8536214d15e5a083378fd814193d14d
SSDEEP

12288:iUVUdvXodpjs9AqbdnLCWe9ho92/Mt+/TNfqziXE+ETKUy2LlV3yXkZfg:MvAjz0LCWQK2A+LNyWXHEmJ2qXkR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b79e1dc9ec5e60278b034232afb4f4c_JaffaCakes118

Files

8b79e1dc9ec5e60278b034232afb4f4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8ae9b615c30beee1c82d3208576f4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32.dll

GetKeyboardType

advapi32.dll

RegQueryValueExA

oleaut32.dll

SysFreeString

mpr.dll

WNetOpenEnumA

version.dll

VerQueryValueA

gdi32

UnrealizeObject

comctl32.dll

ImageList_SetIconSize

shell32.dll

Shell_NotifyIconA

wininet.dll

InternetReadFile

wsock32.dll

WSACleanup

winmm.dll

waveOutWrite

avicap32.dll

capCreateCaptureWindowA

msacm32.dll

acmFormatChooseA

ws2_32.dll

WSAIoctl

oleaut32

VariantChangeTypeEx

Sections

Size: 511KB - Virtual size: 1004KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE