8825c9ac6aac35df919d286e774f8a11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8825c9ac6aac35df919d286e774f8a11_JaffaCakes118
Size

56KB
MD5

8825c9ac6aac35df919d286e774f8a11
SHA1

d97523d69edefa2fa74aea07f06585ed1aaae429
SHA256

2ac5126657e9c1f57e55db858feeb9294823c3e8c0d2229a9be36f08983c6b79
SHA512

97883981d8bcd291435587ad8b8337e3c949b2df9112bc5840700352b0049fe414421cca10cd01393d00b03f34cdfd3e1176cfe759af28e16e481ebba098a204
SSDEEP

1536:wSIFwcSsjPykNlk28yK7FoQe86JMigO41:wSIlVjPykNlfZWyQePM+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8825c9ac6aac35df919d286e774f8a11_JaffaCakes118

Files

8825c9ac6aac35df919d286e774f8a11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec9a25b10b46fb4995eccd0e96b638ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
GetSystemTime
WriteFile
GetLastError
GetVersionExA
GetModuleHandleA
GetStartupInfoA

user32

LoadIconA
DrawMenuBar

winspool.drv

OpenPrinterA
ReadPrinter

comdlg32

GetFileTitleA

shell32

SHGetFileInfoA

msvcrt

_initterm
_controlfp
_except_handler3
__set_app_type
__p__fmode
_exit
__p__commode
exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE