d22d9d45a6b353491286d6a81f19cef1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d22d9d45a6b353491286d6a81f19cef1_JaffaCakes118
Size

751KB
MD5

d22d9d45a6b353491286d6a81f19cef1
SHA1

44e2fdd09525894c9c1c87b578b601585e66b666
SHA256

ddcd28475080bd83f641345d4232f235b17589ea8b4b8b8d277e28b65e2de206
SHA512

e22e806200d93bb562bdea2632dc4c9d141ccab2cf5c1e1ab657e204c50ad2db367523efb6eabb257e9bf1f71c3e251e470e6149827ad658297a26e5b0db6e91
SSDEEP

12288:7qmUqHA76/dk4nidewai5BxjFQEueufF7HhNOfua43Q2jmohErt8rgowfc:73H/3neR5fVueufFFNOWa43QVohEx5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d22d9d45a6b353491286d6a81f19cef1_JaffaCakes118

Files

d22d9d45a6b353491286d6a81f19cef1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81ac5c839593bf826d55534271f17e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

waveOutUnprepareHeader

ws2_32

accept

rasapi32

RasHangUpA

user32

wsprintfA

gdi32

RectVisible

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

StgCreateDocfileOnILockBytes

oleaut32

SysAllocString

comctl32

ord17

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 740KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE