ad16f1dcf6261428257fe35bc480affc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad16f1dcf6261428257fe35bc480affc_JaffaCakes118
Size

285KB
MD5

ad16f1dcf6261428257fe35bc480affc
SHA1

2e3b814156aee879ec4b35db26d1bc4fba264293
SHA256

03e11e406c806aa1c62de2610c60276d951f5b596e9577aa76a61a98f04786df
SHA512

cd156c9262a29df5926c4276de4d861fd7eef84ee259eae58f6236db5aa67fc0277308416aa7923e650058e7f86aca6f87d29d1d718758a5e9b6e17ee4801f31
SSDEEP

6144:zZYwi9exSJEjf6QmMpbDGWy86rAlNUn9j8E+bwK6WkIF209u4dm:F09ec6jf6MpbaRNAlml8/bTd209fm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad16f1dcf6261428257fe35bc480affc_JaffaCakes118

Files

ad16f1dcf6261428257fe35bc480affc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4dc292be8c6fa21166ec686530b3d3b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetLastError
GetCurrentThreadId

user32

SetWindowLongA

winspool.drv

ReadPrinter

comdlg32

GetFileTitleA

shell32

SHGetSettings

Sections

.text
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE