16f305af5f0255c90fa372baaef1a882_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16f305af5f0255c90fa372baaef1a882_JaffaCakes118
Size

1.1MB
MD5

16f305af5f0255c90fa372baaef1a882
SHA1

e3e5f437c577e451fccb0ad989893ba4e655a311
SHA256

2e9b44e3dfb04c4f84680e46af0751d88ec7f5944c5e0d43f84ee3bf912f78d6
SHA512

a79a55ff985efa136770b820923bdcc9fa012b09719d132b90ddbbb27c925f8320f40e5c8f749b900ae4b69719eeb33bb416a32454d66094e7fb442f1c887ab8
SSDEEP

24576:CVfWf09LUPHqb71zk/9k4zj+LO5XDo94HouIkQa/htgnIU:ifWy4Hq31I1cSZo9kou7QYT7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16f305af5f0255c90fa372baaef1a882_JaffaCakes118

Files

16f305af5f0255c90fa372baaef1a882_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72ee0489bc5f77225eb835bc6f612eae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteExA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

PrintDlgA

winmm

timeGetTime

Sections

.PECO
Size: 460KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shrink
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 109B - Virtual size: 109B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ