a7b408e21defe58189fe5a7f779cf69b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7b408e21defe58189fe5a7f779cf69b_JaffaCakes118
Size

1.8MB
MD5

a7b408e21defe58189fe5a7f779cf69b
SHA1

0ed60bd2cb186a682be673bd6bf8dfc4ffe1d8b1
SHA256

4b9d41acd78394d47c7d0d5c82ffe243a2dac3ff9cba63667e10804ec371b794
SHA512

6da9fde74e32c0678475e549860b2dd6b806a5bf96d9111221e706fa2ef102af896f35aa4f5d9119724d41ea73bb76b3812af6afbfdcb14241c5d8a8052108d2
SSDEEP

49152:ifWy4Hq31VarPIzwLTpYtHg7LoYMY0F9aMRP0ukD84/C4m:OWkVCLqtA/oYN0OqkU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7b408e21defe58189fe5a7f779cf69b_JaffaCakes118

Files

a7b408e21defe58189fe5a7f779cf69b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72ee0489bc5f77225eb835bc6f612eae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteExA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

PrintDlgA

winmm

timeGetTime

Sections

.PECO
Size: 460KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shrink
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 109B - Virtual size: 109B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ