b1bbd39f55c8f384783840f0bbee0bb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1bbd39f55c8f384783840f0bbee0bb8_JaffaCakes118
Size

948KB
MD5

b1bbd39f55c8f384783840f0bbee0bb8
SHA1

ea80a789bc1b8e99f9fd6707c25219220adb4aa5
SHA256

9252c5a8539a18b8d904a8281604b299c6f172c3b9377d470fc51f06336975e8
SHA512

5f0ea76a4ed9b5c6fcec217c6eb644c53441c57875e8b4781b34789e3f41def35d570bacf4e5c5a6d59d3c18d147f15f9fc86615943ab9730554f8111c6d1659
SSDEEP

24576:UdRPEH54gfcsPZLswa3usS0MP7EiAkEo0C1hq/wH:kPEH99uVaEivLhss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1bbd39f55c8f384783840f0bbee0bb8_JaffaCakes118

Files

b1bbd39f55c8f384783840f0bbee0bb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe9409cde0186ace3eef69655ba3370f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

avifil32

AVISaveOptionsFree

comctl32

ImageList_SetIconSize

comdlg32

PrintDlgA

gdi32

UnrealizeObject

imm32

ImmGetVirtualKey

msvfw32

DrawDibRealize

ole32

CreateStreamOnHGlobal

oleaut32

SafeArrayPtrOfIndex

shell32

SHGetSpecialFolderLocation

user32

mouse_event

version

VerQueryValueA

winmm

waveOutGetNumDevs

winspool.drv

OpenPrinterA

Sections

CODE
Size: 898KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE