88be30ff5b8913d6e2d44cd3f9eaf73f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88be30ff5b8913d6e2d44cd3f9eaf73f_JaffaCakes118
Size

741KB
MD5

88be30ff5b8913d6e2d44cd3f9eaf73f
SHA1

94ea55ca5e53b9bac062f6539d2729be6432b3cb
SHA256

1d422c9ab87caa8075b1948245ecd515531019aa22e4dd8d08995aad2e0af97c
SHA512

71429d1166873e35ff4ea2b6a164060bc3bf65c6ccfc45c77752cddb30cca335f418144e3e4e1b6805bd296d292700efa026c87707b5909638094ec2b47d6945
SSDEEP

12288:/nXpLLmGfEiKnLmbaz4DhcyU4uVoPbdh7+k3XZpv2IhU1xl4AGSL9kta8rDbjKt0:/dmG8PnAazEr/uwbddj3XthaDxktbDja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88be30ff5b8913d6e2d44cd3f9eaf73f_JaffaCakes118

Files

88be30ff5b8913d6e2d44cd3f9eaf73f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81ac5c839593bf826d55534271f17e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

waveOutUnprepareHeader

ws2_32

accept

rasapi32

RasHangUpA

user32

wsprintfA

gdi32

RectVisible

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

StgCreateDocfileOnILockBytes

oleaut32

SysAllocString

comctl32

ord17

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 730KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE