a81982bd6ef1d4289b9dc0eaa27cfa69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a81982bd6ef1d4289b9dc0eaa27cfa69_JaffaCakes118
Size

573KB
MD5

a81982bd6ef1d4289b9dc0eaa27cfa69
SHA1

c675bf0519a6da270705b593e6990de35ab73f5e
SHA256

068087fa9d66c3250e07b1a0ca50abf3a2153eb768750e94a0c4e585a274f0e5
SHA512

d431cfa27f841a50c85eeb858c2545e187f32c9954855f79a363e74c4b0a7fd80e7eb448d101d48739c4b3b3113e0b127b09c2ba016ca535066527f4623d3098
SSDEEP

12288:LGoALFGnZTFJvxbThljZi5O/7dOOoe53BWUqH0F1cfrZg:LpALFGZxJ5bThlwO/7cOP5RWUFFMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a81982bd6ef1d4289b9dc0eaa27cfa69_JaffaCakes118

Files

a81982bd6ef1d4289b9dc0eaa27cfa69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63fca805ebe3afb9b8699addcc0089f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

ChangeServiceConfigA

wsock32

WSAAsyncGetHostByAddr

gdi32

CreateFontA

user32

BringWindowToTop

winmm

timeBeginPeriod

oleaut32

SysAllocStringLen

Sections

.text
Size: 566KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE