b21e09d39c6f2a4f032c959d547b9826_JaffaCakes118 | Triage

Sharing

General

Target

b21e09d39c6f2a4f032c959d547b9826_JaffaCakes118
Size

262KB
MD5

b21e09d39c6f2a4f032c959d547b9826
SHA1

5fe64eee960b4f0c17ea1d514a091920889e2d14
SHA256

e8bb745626d146aef14719c7341ca512617c5f9703cee96581de4cf511c66aab
SHA512

4e8c5dcb7f50b0f19f3e633e18eefc308c468705b2aa3e68c08ce3cbba148ef7822ce38ce00cf838bff9511ab0fd8751d0223289394d9709b3bd325fee395939
SSDEEP

6144:U/ROHRTScOZ2HrLcEM6Uxc2gPZSoKToD9FuX52WbxFMRmk:zxGzEncEHDRSCh8wo2Rmk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b21e09d39c6f2a4f032c959d547b9826_JaffaCakes118

Files

b21e09d39c6f2a4f032c959d547b9826_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4927e8812235c0c6f0a4b31d94259ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

avicap32

capGetDriverDescriptionA

wininet

InternetReadFile

advapi32

SetSecurityInfo

user32

CreateWindowExA

version

VerQueryValueA

comctl32

ImageList_SetIconSize

mpr

WNetOpenEnumA

gdi32

UnrealizeObject

ws2_32

WSAIoctl

oleaut32

SysFreeString

imagehlp

CheckSumMappedFile

wsock32

WSACleanup

msacm32

acmFormatChooseA

winmm

waveOutWrite

shell32

Shell_NotifyIconA

Sections

CODE
Size: 251KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 28B - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ