2a41c2978db65693d7b1d408b66dccde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a41c2978db65693d7b1d408b66dccde_JaffaCakes118
Size

389KB
MD5

2a41c2978db65693d7b1d408b66dccde
SHA1

91cae00f87bbf50f3be1ab2ed5fe4c5e4b5ec485
SHA256

afd77b1648207d50b9d04227e5240b93da12979dd2ab558056448166b218d6f7
SHA512

c6eaedba90ff227a406332eb7fa861fc7f78ddf07ca3dfd919efb70cd28c1a3057f0a7eef8864158840d26b39bbac9f730864648e612805faa59516f331a716e
SSDEEP

12288:I6w0x8emGtuQkkGg2Nj03aKazWt+SGO4:I6wJemGU91g2N+abzWtHv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a41c2978db65693d7b1d408b66dccde_JaffaCakes118

Files

2a41c2978db65693d7b1d408b66dccde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a23497d8fac0003c74c4ee99e7084d39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteA

comdlg32

ChooseFontA

Sections

CODE
Size: 379KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE