8433feacb3232d17756c4aa6a6357424_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8433feacb3232d17756c4aa6a6357424_JaffaCakes118
Size

65KB
MD5

8433feacb3232d17756c4aa6a6357424
SHA1

2bd810b8c43b4b3cf6534cac793b31b89ddd518b
SHA256

4ec8404a4728109d1ba6a3fb68f7989fe210f3bb8173d56ad6687a922b6692c5
SHA512

14753535bce83240f49b605b9d893cdc4a36724fadd9aab33dbfc2de5d0d876e8ce48feb28157429db6b7d596c9d432f57d7a60129a2ebe6282be319a404cd57
SSDEEP

1536:UX/3JyWHSXyk3jQOpnrgis1N/gv2KZ5vd0rQXNr206g:UOx3jDqFq5irQdB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8433feacb3232d17756c4aa6a6357424_JaffaCakes118

Files

8433feacb3232d17756c4aa6a6357424_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a4932fbe90ac92fd5f3e7c5e2921e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetSystemInfo
GetModuleHandleA
GetStartupInfoA
GetCurrentDirectoryA
GetTempPathA
GetVersionExA
GetLocalTime

user32

CharUpperA
RemoveMenu

gdi32

DeleteDC

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

msvcrt

_adjust_fdiv
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE