2a2ca524dc94ad12e19684c628a15978_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a2ca524dc94ad12e19684c628a15978_JaffaCakes118
Size

833KB
MD5

2a2ca524dc94ad12e19684c628a15978
SHA1

acb43782f864dada55d8a5ff02672b0e7877d3d0
SHA256

0af64c609c154523437c1f3e144c1475c123099094365d1d165d6ecaa7e419a6
SHA512

87e6f26cf8e806b3486c5a9a717fe701e03fdf1ef3a4fd232d6d840712e4182343a7756ab1f466534d8a7a940a8bb552e0a8c375b6ceaf9b7a2c890be5cd8f00
SSDEEP

24576:qroI9kneRgtgJlJSrzBQJPC3VM53c75Xf:qroIun2PrJSf6J63VM53ch

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a2ca524dc94ad12e19684c628a15978_JaffaCakes118

Files

2a2ca524dc94ad12e19684c628a15978_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96a3b5890cf5d5a98a6194155b5a8738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

GradientFill

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

winspool.drv

OpenPrinterA

comdlg32

ChooseFontA

shell32

ShellExecuteW

Sections

.text
Size: 820KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE