1a0cb05292678e0bf641196fcfb26798_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a0cb05292678e0bf641196fcfb26798_JaffaCakes118
Size

601KB
MD5

1a0cb05292678e0bf641196fcfb26798
SHA1

13578d4d9977d4cdb774a08f2c0596730b05e16b
SHA256

2798c458d9b153f1e15683ac83e8e8c61785c215caef211ac78db679f97f2b2b
SHA512

1551d85a4babc306ff1c8a997af6dcbaebb60657a86a91e8b57fe0b30437e8dfa9a184af1e87e1621df148b1dd38dc4d61ff32881bd7e2e43203634626379619
SSDEEP

12288:36FGl/RYlcg8+/krYpah5mMAOJKFnqz/rIFCt4HmzdyxG08Si1gSKLh:36klec5rYU1LIYtkm4xGDeS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a0cb05292678e0bf641196fcfb26798_JaffaCakes118

Files

1a0cb05292678e0bf641196fcfb26798_JaffaCakes118
.exe windows:5 windows x86 arch:x86

967a4638f423d73ce83c307f22584102

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

LoadStringW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

OleUninitialize

comctl32

InitializeFlatSB

wininet

InternetGetConnectedState

winspool.drv

OpenPrinterW

Sections

.text
Size: 582KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE