603c5027f1eed721d2dbe1339cf90070_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

603c5027f1eed721d2dbe1339cf90070_JaffaCakes118
Size

2.3MB
MD5

603c5027f1eed721d2dbe1339cf90070
SHA1

3758e23be9bcb03f52854141eda891b815f9e04a
SHA256

6e0e90fa61ef4c75440bcd061baffeefeb42cc7de2e9a4bcd661b54b017d2d32
SHA512

b1382490a10e1ae407d2044a9a885b36e563f5ec5ce820ca59b4ef9fc8a8593df87fc1fa48ee69f6ad08706dd0039999cc5ad320edbaa2160822d33b9ed3a04a
SSDEEP

49152:2MnDuc77JDteYZ0iLUBvHP1NFNRguzTI087TOroRjpXw:2Mnic77JZeU0iEHP1tZs0E6Cjp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603c5027f1eed721d2dbe1339cf90070_JaffaCakes118

Files

603c5027f1eed721d2dbe1339cf90070_JaffaCakes118
.exe windows:4 windows x86 arch:x86

147fbb4c93d32c0e4e78f7b6e6269729

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

comdlg32

PrintDlgA

Sections

CODE
Size: 2.3MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE