1118add7ac9e908c35af1d3803437b39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1118add7ac9e908c35af1d3803437b39_JaffaCakes118
Size

551KB
MD5

1118add7ac9e908c35af1d3803437b39
SHA1

f9ac5ea2f43845e312a663f4f1849887a06e41ba
SHA256

4a64160450e69a2a16f4b7f54fbdcfc3c787e2bb4615a6a4c4cd9e7b8f61de42
SHA512

f595e4bae42fccf79c67dab325ea29818fdd1a230369113421b18f47b5251df9b0d454563a12400f9effca9865a559dc6877d8057e1f7a06508c195a16812532
SSDEEP

12288:i8NZvBppmYBqyUWnWJotoipeNsyKjgK3smTFClNmUI2WwTA84T:pvBppmRyUKWJ2oipeqcK86ClNmALTA8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1118add7ac9e908c35af1d3803437b39_JaffaCakes118

Files

1118add7ac9e908c35af1d3803437b39_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0bdcfffad0163015151a721698304fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

ReleaseCapture

advapi32

RevertToSelf

ole32

StringFromGUID2

shell32

SHGetPathFromIDListW

oleaut32

SystemTimeToVariantTime

shlwapi

PathStripToRootW

gdi32

GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter

comctl32

InitCommonControlsEx

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

iphlpapi

GetAdaptersInfo

rpcrt4

UuidToStringA

oleacc

LresultFromObject

wininet

InternetGetLastResponseInfoW

Sections

.text
Size: 474KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE