9565ebe9f6701bb2f320a58f79d0930b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9565ebe9f6701bb2f320a58f79d0930b_JaffaCakes118
Size

471KB
MD5

9565ebe9f6701bb2f320a58f79d0930b
SHA1

dcef724840073dea6be676e4b395bf05cd5bda09
SHA256

3b2c7eb35d2da917a7264b11f1fbf4d32e13e6aa7aef0ed0de6b02bc15cd58c3
SHA512

d24ced8f0bbf28c9ccea2adcdc902720ca65539c8f18be84caefb46c9311640c71050bd790fecfb49582bd077a2f19bba1e12ff0dabbc192943ae118ec0068ca
SSDEEP

12288:LX9e1hZ1P8hW+1KzXIKcwW/TySf5GTzyO3yg08MoRPB:zoZRf+1ArcwW/WSfWyOin0RJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9565ebe9f6701bb2f320a58f79d0930b_JaffaCakes118

Files

9565ebe9f6701bb2f320a58f79d0930b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

000f7583ce3c85e7d1f6486a087ea1b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

LoadStringW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

shfolder

SHGetFolderPathW

ole32

OleUninitialize

comctl32

InitializeFlatSB

winspool.drv

OpenPrinterW

shell32

ShellExecuteW

Sections

.text
Size: 381KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE