2f1ff3d5880d17296ed6b540ef3d9810_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f1ff3d5880d17296ed6b540ef3d9810_JaffaCakes118
Size

521KB
MD5

2f1ff3d5880d17296ed6b540ef3d9810
SHA1

1c2cc16c9b6ce7290990b5af9924d2f3c3e0e5b4
SHA256

81526662e4e6c4176ec58a206c3ef82efb2d85ca3ebdfd9a6a9b0d5de8c33757
SHA512

125fefa1c6584c4a2ee2e3ea0ed9f4920dfd523bf7f93eeda5dbdf8db82a387e202a3c1e43c0fe4c0a6c08496328982599e5b23a441c790083c72ba508e3adc9
SSDEEP

12288:C0aIDG6w4fui0Ttau8rkLUfHHy/b7o1gHTZ+ZM0YonLD:CVfWf09LUPHqb71zeM0YUX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f1ff3d5880d17296ed6b540ef3d9810_JaffaCakes118

Files

2f1ff3d5880d17296ed6b540ef3d9810_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72ee0489bc5f77225eb835bc6f612eae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteExA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

PrintDlgA

winmm

timeGetTime

Sections

.PECO
Size: 460KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shrink
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 109B - Virtual size: 109B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ