df826f1c34e9b4c02e2c6160ccbab4b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df826f1c34e9b4c02e2c6160ccbab4b2_JaffaCakes118
Size

265KB
MD5

df826f1c34e9b4c02e2c6160ccbab4b2
SHA1

62ca60ab9c4fb9c3d7c3daed0e14e3060f0985fd
SHA256

3bfa763da8805fb17f2d2a5718786d0bb896e5e2d4d3795212023f6bce0e7967
SHA512

902fe7f919bd2b7e12794383081860ec0713e49308c3cf1e70955105d23a1aab4cae2ba2374e41dff538df3d8702ac750543b48181f7912556fb5858ff97289a
SSDEEP

6144:fudcWyNhMs8MrlLN9UCVT+Qg4pAkijsFfOUGAhqoTGBwv:fudcpZLXUCt+07ijsFmULTGBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df826f1c34e9b4c02e2c6160ccbab4b2_JaffaCakes118

Files

df826f1c34e9b4c02e2c6160ccbab4b2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

4834ef0037403497d88984ec4281cada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

msacm32

acmFormatChooseA

user32

GetKeyboardType

winmm

waveOutWrite

version

VerQueryValueA

oleaut32

SysFreeString

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

gdi32

UnrealizeObject

wininet

InternetReadFile

advapi32

StartServiceA

imagehlp

CheckSumMappedFile

avicap32

capCreateCaptureWindowA

mpr

WNetOpenEnumA

wsock32

WSACleanup

ws2_32

WSAIoctl

Exports

Exports

CreateObject

Sections

CODE
Size: 255KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE