d606cf63090cc8fe243569cb45eccd5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d606cf63090cc8fe243569cb45eccd5f_JaffaCakes118
Size

121KB
MD5

d606cf63090cc8fe243569cb45eccd5f
SHA1

ff95d4248ced9abb35ab6dd0cef46ae66801c287
SHA256

c214311e0b9a6319b019555b24157e4687075d11f82b7028fe56d73af18a81cb
SHA512

f5f2afa33033c0fd65f675d15289bf6e1a8d0cd2ce883cef4c502655a4c46d61581cb720601ce05735107ed5b8e28085e29bee75479d2ff2fddeaa0957894c7c
SSDEEP

3072:sf3+uinCA0LMLN7q55xPz3i4R6cAfNUTs5tI25e:sgCA0LmA5PPz3fRrAfNyJ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d606cf63090cc8fe243569cb45eccd5f_JaffaCakes118

Files

d606cf63090cc8fe243569cb45eccd5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

670bfe286e328657f802e11091e10bf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadCursorA

gdi32

DeleteDC

winspool.drv

ClosePrinter

advapi32

LookupPrivilegeValueA

comctl32

ord17

shlwapi

PathFindFileNameA

oleaut32

VariantClear

Sections

.text
Size: 89KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE