20a19ba8fca60b88078deb67ca5d7d7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20a19ba8fca60b88078deb67ca5d7d7f_JaffaCakes118
Size

551KB
MD5

20a19ba8fca60b88078deb67ca5d7d7f
SHA1

507529cd3fe8d60e6385d5a5bfbf947ab3d622bd
SHA256

247e2ddfddcfd347edbab0cb5a1c12eaffc4180f9626f2944ee356b5b2b802b5
SHA512

ac496a0db1f87c3acdacca8a2829fbe417a01db0d6834b976a88a2155b5fabc725a097d6d35472cf68930263b3981dda5a05f597b1c30dbdf6a659e21007fd14
SSDEEP

12288:i8NZvBppmYBqyUWnWJotoipeNsyKjgK3smTFClNmUI2WwTA842:pvBppmRyUKWJ2oipeqcK86ClNmALTA8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20a19ba8fca60b88078deb67ca5d7d7f_JaffaCakes118

Files

20a19ba8fca60b88078deb67ca5d7d7f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c0bdcfffad0163015151a721698304fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

ReleaseCapture

advapi32

RevertToSelf

ole32

StringFromGUID2

shell32

SHGetPathFromIDListW

oleaut32

SystemTimeToVariantTime

shlwapi

PathStripToRootW

gdi32

GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter

comctl32

InitCommonControlsEx

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

iphlpapi

GetAdaptersInfo

rpcrt4

UuidToStringA

oleacc

LresultFromObject

wininet

InternetGetLastResponseInfoW

Sections

.text
Size: 474KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE