f91ba17b0b67aa3f1f3211f31f7d7c27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f91ba17b0b67aa3f1f3211f31f7d7c27_JaffaCakes118
Size

1.2MB
MD5

f91ba17b0b67aa3f1f3211f31f7d7c27
SHA1

44c3390176a1c197141994964ea57fe572c81fc7
SHA256

bdd8bdd0207c3a1de122e65b7c4f61ce3b716c1fd79360fb2e820a2c97889fe0
SHA512

a8ed4d6fa69dd922a8ba405516f1c07c71bafd975ebfbf5eab3ef2020e651d2fe7556081a75eca42556d678bdd1c657a74bc2c3165b4712da4645b3493dcfd4a
SSDEEP

24576:BvOXeICRNtELsdEBqs0Dc7De1Ha5bDQOAqW6MDY6g4:Bv/7VEou4DMQHa5/TAqn/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f91ba17b0b67aa3f1f3211f31f7d7c27_JaffaCakes118

Files

f91ba17b0b67aa3f1f3211f31f7d7c27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5164c87ad35873a3a7f3fd158235a972

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

EndDialog

gdi32

PtVisible

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathIsUNCA

oleaut32

VariantChangeType

ws2_32

ntohl

Sections

.text
Size: 1.2MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE