45763c18120820b9af65f63a9ee800d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45763c18120820b9af65f63a9ee800d7_JaffaCakes118
Size

964KB
MD5

45763c18120820b9af65f63a9ee800d7
SHA1

c604c934c1a26f70e134d5311e68db851927feff
SHA256

97006ca3d68aeb0bacd4c57d6ba471663ceb008009fb1ed467a30b93d6c2a5db
SHA512

63639ea77fa0eda5cb8a8ff7e91f2d76da0b4db24ab5c2ea2407f1ed4d44992729dea987dd21bfe83cd7a1ea515fa6f45d7be0b9abc6063b56d3db4b6694b3e5
SSDEEP

24576:i5+p2XVWDKjJoESxMOVHrGxfKvN7QNb9Gx4rmzzGd0:i5+OVWeOtMOVHyxfKhxNGd0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45763c18120820b9af65f63a9ee800d7_JaffaCakes118

Files

45763c18120820b9af65f63a9ee800d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e0170ccb8e1563995787d6348f01b18d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

imm32

ImmSetCompositionWindow

winspool.drv

OpenPrinterA

shell32

ShellExecuteA

comdlg32

PrintDlgA

winmm

sndPlaySoundA

wsock32

WSACleanup

Sections

CODE
Size: 824KB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE