db1591cc6bab1a39d3d8aec6882f3a21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db1591cc6bab1a39d3d8aec6882f3a21_JaffaCakes118
Size

1.1MB
MD5

db1591cc6bab1a39d3d8aec6882f3a21
SHA1

ab4ab1fed2ca6d710153264e41da79f099895b82
SHA256

92c99bf2b6e5931064e13f5e30828555949c684fed5afcbb1dde685c5393e5a8
SHA512

39493412ea1bcd5abd19c5490750fa33a856fc8fc1d37d784093a2798463f960ed510271b0f5ac2d968962c92a19ce4295d2b67cdb8f039db411a7eece60f48b
SSDEEP

24576:rCjmvJSOvhF8ejLX7/PoA8AyHHzMHOzFAD1DYrTJhUavxXrFPD9:Pxb4ejL7/PozAsTMHOz2wTJyapXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db1591cc6bab1a39d3d8aec6882f3a21_JaffaCakes118

Files

db1591cc6bab1a39d3d8aec6882f3a21_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c7ebe1854f9f549dc6f1636cafdf926c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

LoadStringW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

olepro32

OleLoadPicture

ole32

CreateStreamOnHGlobal

comctl32

InitializeFlatSB

wininet

InternetSetOptionW

shell32

SHGetFileInfoW

winspool.drv

OpenPrinterW

wsock32

WSACleanup

winmm

waveOutGetNumDevs

iphlpapi

GetNetworkParams

Sections

.text
Size: 1005KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE