0fe75390293e3ebbe8184b7050304a08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fe75390293e3ebbe8184b7050304a08_JaffaCakes118
Size

507KB
MD5

0fe75390293e3ebbe8184b7050304a08
SHA1

175eb708cbc61286d59f93fd8132c9828e262307
SHA256

21b3ac9c7c9944d5ee3265907f1a5c55d4100542613dac1950b86a408eda1d69
SHA512

977271a29d6135e65f0988a0be4a6bf854d620570f84354ce3e817ac320acd6a49287c0faecb6f6170aaa553856b408f9e96776d1dd54e70835b265e380b8987
SSDEEP

12288:vioDnkuhAJfE8LtZxduK5HiuXAgnyO8R/gJGjJl7yugKr:vB9985Zzh5FKt0uX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fe75390293e3ebbe8184b7050304a08_JaffaCakes118

Files

0fe75390293e3ebbe8184b7050304a08_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7bd32c8ec6eaad4e861a654e708b9604

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

MessageBoxA

msimg32

GradientFill

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

OleUninitialize

comctl32

InitializeFlatSB

shell32

Shell_NotifyIconW

wininet

InternetGetConnectedState

winspool.drv

OpenPrinterW

Sections

.text
Size: 496KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE