a4077be933c7315864ddd523612f4217_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4077be933c7315864ddd523612f4217_JaffaCakes118
Size

1.4MB
MD5

a4077be933c7315864ddd523612f4217
SHA1

bc0d107023bd5803db700296822c7a186d6dbc7d
SHA256

e50fbe2953e1109a623ec91f023e7b16067ba2f500e6795cb3f50b9124ae9047
SHA512

7eb9810514f43f4c0d0095e96ac8810e0e2f061c44cf813a0c02dccbea51473da644db64cbb9916de415e442005e4e2b044cd105131733cc29e2f0d85cbec69d
SSDEEP

24576:tNo7baSjoFAgw8zH4uw5BKNFNlaXac620Hov5JR+V5L2nLliOwq7DFfHHn:tNoKhFAFc4uEBc7Y620HKDytUwq7DF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4077be933c7315864ddd523612f4217_JaffaCakes118

Files

a4077be933c7315864ddd523612f4217_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c76d05f49da4d431a24b01aa4e7c892

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

user32

GetCursorPos

gdi32

SelectPalette

winmm

waveOutUnprepareHeader

winspool.drv

DocumentPropertiesA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

closesocket

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 1.4MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE