112885089ec6eb0fe5a03b1d8945ee9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

112885089ec6eb0fe5a03b1d8945ee9f_JaffaCakes118
Size

1.3MB
MD5

112885089ec6eb0fe5a03b1d8945ee9f
SHA1

6fa4d2685dea7bc2b198b615dca2cebdfa233460
SHA256

b474b810599fb1a90cdb8e4e114ecadddcfe0fb63f1678c236de19fbf5d468a6
SHA512

a756cdd294b35994951d33941b6f49f96936fcff09e5d20be5f0584dfcf32ce56992e3398767347f4e17eba35943177a58b7797175022f754f4dfbd9cddb8ebb
SSDEEP

24576:K3V7qLIOlQj/a7s7GEwVbr5/FtMtqagCroTYJtH92ITvv+gzc2WF+:K31qjQTpGHb1k/ruYJz20X+gzc22+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112885089ec6eb0fe5a03b1d8945ee9f_JaffaCakes118

Files

112885089ec6eb0fe5a03b1d8945ee9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8823364901e633f35199850097cc404

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteA

comdlg32

PrintDlgA

opcomrd

FTID_GetDeviceChipID

opcomusb

FT_SetUSBParameters

Sections

CODE
Size: 1.3MB - Virtual size: 137.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE