0ccffe8f0b861a7a2dca96226c6e6743_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ccffe8f0b861a7a2dca96226c6e6743_JaffaCakes118
Size

214KB
MD5

0ccffe8f0b861a7a2dca96226c6e6743
SHA1

ab1234c4448dba6b947fa98ad68ffab6e8626a8e
SHA256

a5dadd9855c71ec44c7522131c02aba650a52885c66e0129b2b97594a68c3f47
SHA512

0f39ddecb5bea2e3ff423bc6fa671eace63502dfe5a6243860d7b2cab2f9b8fa21bb53559bb645e35b98550b8682a8c93d49ab9d929f12242f5f32c70301e184
SSDEEP

6144:ApLJxIhUMeAkEtKhtRyMbbt0cCIAddMNXH4eR:GxI3e5SYRbbbuv+H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ccffe8f0b861a7a2dca96226c6e6743_JaffaCakes118

Files

0ccffe8f0b861a7a2dca96226c6e6743_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6015d76e68d4fefddacd6d87bd89ec1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

wininet

InternetReadFile

urlmon

URLDownloadToFileA

Sections

CODE
Size: 190KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE