aee2ded679f060a20d804e96622f2aec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aee2ded679f060a20d804e96622f2aec_JaffaCakes118
Size

720KB
MD5

aee2ded679f060a20d804e96622f2aec
SHA1

814261761f6edd507d6303b5701563afa9a42cdc
SHA256

56f5eb8f6488b6bf935769c3d1846db78ac895bd095b8c50f116a9726741fb33
SHA512

85af77fb1c43f4be0584171cd00ed2257d114f7939a3669c91e94e344481fd2ef4ccc62eed3a62f13039f54e6b4e3403a0888460a78c9fc5ed8faa99a0972762
SSDEEP

12288:ZCsICw+X/Ylsj6V1fukHyzjAlP8534RE+d5yrSyHd6Y0Z:ssRX/0j1GJn2ySyHd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aee2ded679f060a20d804e96622f2aec_JaffaCakes118

Files

aee2ded679f060a20d804e96622f2aec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96a3b5890cf5d5a98a6194155b5a8738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

GradientFill

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

winspool.drv

OpenPrinterA

comdlg32

ChooseFontA

shell32

ShellExecuteW

Sections

.text
Size: 700KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE