0c0ea7f195bae4ee33e35432d2b73930_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c0ea7f195bae4ee33e35432d2b73930_JaffaCakes118
Size

2.2MB
MD5

0c0ea7f195bae4ee33e35432d2b73930
SHA1

699bb6439cf337ccc2817115f5db264780645dca
SHA256

a664677a87c103352eedc57e90fbc23a8ca2b702a8e9b48f9128ad2f3cf9bb54
SHA512

23d2b79115f6d7d91d5c1a8af8609ff6d1c01d0388187f15e3ebf0a85e80287ad6470ae021a681450f58860decf0410fefca92b5bb2fdf4cff6a99aaa846e088
SSDEEP

49152:mqGPkp/uS2n0/aawsRlamjf2Qoit4OPQFVVk:mq/SlawYlamjOQh4uQhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0ea7f195bae4ee33e35432d2b73930_JaffaCakes118

Files

0c0ea7f195bae4ee33e35432d2b73930_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e3ed1dc60ee6eaf806a34e32774aa820

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

LoadStringW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

CreateStreamOnHGlobal

comctl32

InitializeFlatSB

winspool.drv

OpenPrinterW

Sections

.text
Size: 2.2MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE