371d8782fb448ed841d553a6bef79a67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

371d8782fb448ed841d553a6bef79a67_JaffaCakes118
Size

230KB
MD5

371d8782fb448ed841d553a6bef79a67
SHA1

82901413aae836d0907e4b8d7407f8a8211e2bc0
SHA256

45013d181d43323d5c1c41aa9e0bffdf0e3869c090f9f28a997c7cc442a568b4
SHA512

91394be312f6c72dfb1d7e029e8f9d600fa8f7da7a0396a9f111e31912fbfe7573d4741658f58ccb81ef70b134ae4a9d4de305e37e85b0c0149dde39f71e5324
SSDEEP

3072:j0/fvuCd/epietTVI8Up/512O3mDDdP3pDiNr3GCZi+u93SCNNr9hoOVGToadTu:j0bd/efKqXlFi8vzfo/ToUa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
371d8782fb448ed841d553a6bef79a67_JaffaCakes118

Files

371d8782fb448ed841d553a6bef79a67_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0768373a3596ffbe456607363da8db13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

PostThreadMessageW

gdi32

ExtSelectClipRgn

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW

advapi32

RegDeleteKeyW

shell32

CommandLineToArgvW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject

oleaut32

OleCreateFontIndirect

Sections

.text
Size: 110KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE