3764a091f353bd4131f32bf25aa7dd45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3764a091f353bd4131f32bf25aa7dd45_JaffaCakes118
Size

958KB
MD5

3764a091f353bd4131f32bf25aa7dd45
SHA1

fa3f711985f82ea2c3859ae5edaa196c0d94a2eb
SHA256

65243a9c760fcfc6ad1c35e126b772e334812588bc4ce14b89aaaf3c9677e6b7
SHA512

4d0c8c6d5a2f6450030709c6fbba268f3b989e54720f7c9b432b40a94722e3888f715e2598d863c3da22e53616e1686672a093854ebdf5f3f47a1444888f8e5d
SSDEEP

24576:+DbXjlc/rMvurq6q0tAL8zM1ul6+k/wv:Mzj+r4OTt6/2Wwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3764a091f353bd4131f32bf25aa7dd45_JaffaCakes118

Files

3764a091f353bd4131f32bf25aa7dd45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2770e8eb0c2c3b1542c6f7f0d914effc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

UnregisterHotKey

gdi32

ExtTextOutA

winmm

midiOutReset

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CreateILockBytesOnHGlobal

oleaut32

SysAllocStringLen

comctl32

ImageList_DragShowNolock

oledlg

ord8

ws2_32

closesocket

comdlg32

GetFileTitleA

Sections

.text
Size: 935KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE