64fac08ffbc9e835a3a15cb4af2da3b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64fac08ffbc9e835a3a15cb4af2da3b4_JaffaCakes118
Size

16KB
MD5

64fac08ffbc9e835a3a15cb4af2da3b4
SHA1

a49127ab65a174bdcf3831972390f65030cffdba
SHA256

d72105b06d32e8f544e9cc713bc0f58b346290b9a4b4f0494b4851ca08df6570
SHA512

827319dfae12d18ebdc7e7015423f2afaebb1c3b2e5a94cf9ba972158f4097bbb427186cf54a007230725fc6e2cf88f9e9f1293e08470c118b3638b03200ffc6
SSDEEP

384:C3PNhcKrNAzyobIHAnrDhKgNRLFmH0dPx4vJsFIwK:CjcKAbL/hjNRLFc0dWhsiz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64fac08ffbc9e835a3a15cb4af2da3b4_JaffaCakes118

Files

64fac08ffbc9e835a3a15cb4af2da3b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cab8a7144e70ddc16b6a7fcc813e5c3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetModuleFileNameA

user32

DrawMenuBar
GetSystemMetrics

winspool.drv

WritePrinter

advapi32

RegQueryValueA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE