d0b609a416700d0dd8729c34660f72da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0b609a416700d0dd8729c34660f72da_JaffaCakes118
Size

223KB
MD5

d0b609a416700d0dd8729c34660f72da
SHA1

df0cdf59d6868c7b3b96e4bed454298fe955c189
SHA256

62d2b0dc37b55aba0dc31311460f233e1af7cb157cd271ed8da8ef2ba9a3716f
SHA512

30e8b55f1f6776f637e0035d09fd52da89911e8f61ed85ab1d79fb492f806bfe5806bac49dab722e6a9936aa9c612dc02ab6a23e7dbd9491ae7860ba3b1b55a9
SSDEEP

6144:qGg4ei8rGSmIEmV/o1nvg1uG4FTSSl2LJ:qP4Z/m+zo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0b609a416700d0dd8729c34660f72da_JaffaCakes118

Files

d0b609a416700d0dd8729c34660f72da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1dfc40a56984d2dd9a7e90bec76366a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

wininet

InternetReadFile

Sections

CODE
Size: 190KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE