f0246332353920bcb1f8cc87e01e755a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f0246332353920bcb1f8cc87e01e755a_JaffaCakes118
Size

123KB
MD5

f0246332353920bcb1f8cc87e01e755a
SHA1

c52931213f3f7d8eef388d7a41a4ac0e39fe84ac
SHA256

717e5ba73f811dcca9cf891df970993676af0bed38235d24708c810d7aec1acd
SHA512

3103d8638ca2b18566449ccc0c7cfc89dd4c3bfd7fdb0217c209f6e5e553b1a2bdc47bb3a7e2973768cf65d7248832d7cddcf439ff707e074b39a9224e277213
SSDEEP

3072:qmzyPXa6HanMFhS4jyIinJtJCEiEd6Y7f/VHwLwzs:BzAbnFh7jVI5iEd68/VHwLwzs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Lexmark z735 driver.exe

Files

f0246332353920bcb1f8cc87e01e755a_JaffaCakes118
.zip
Lexmark z735 driver.exe
.exe windows:5 windows x86 arch:x86

07bdd850dd18fdf26c29ac9c4b72f1ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\Qmdtindhzckhb\hkyqqaqd\hejrtArwaieFu\ntaPzbdmqgm\onhQeeiwoatbTv.pdb

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
fclose
_amsg_exit
_initterm
_ismbblead
rand
_XcptFilter
_exit
_cexit
__setusermatherr
memset
__getmainargs
isspace

shlwapi

UrlGetLocationA
UrlIsOpaqueW

user32

SetWindowTextA
CascadeWindows
GetIconInfo
ScrollWindow
ToUnicodeEx
CreateAcceleratorTableW
SendMessageW
GetClassNameW
CreateIconIndirect
SendMessageTimeoutW
IsCharAlphaA
wsprintfW
EnumChildWindows
GetNextDlgTabItem
GetDC
DefDlgProcW
DestroyMenu

kernel32

MoveFileW
GetCommState
GetModuleHandleA
lstrcmpiW
DefineDosDeviceW
SetCommBreak
GetModuleFileNameA
FindResourceA
GetComputerNameA
lstrlenA
GlobalMemoryStatus
LoadResource

Exports

Exports

?TravelCheck@@YGK:O

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.$dsdir
Size: 512B - Virtual size: 123B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.icar
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecar
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ally
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.carry
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ram
Size: - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07bdd850dd18fdf26c29ac9c4b72f1ef

Headers

File Characteristics

PDB Paths

Imports

msvcrt

shlwapi

user32

kernel32

Exports

Exports

Sections

.text Size: 155KB - Virtual size: 155KB

.$dsdir Size: 512B - Virtual size: 123B

.icar Size: 1KB - Virtual size: 1KB

.ecar Size: 512B - Virtual size: 84B

.ally Size: 1024B - Virtual size: 518B

.carry Size: 1024B - Virtual size: 576B

.data Size: 2KB - Virtual size: 1KB

.ram Size: - Virtual size: 98KB

.text
Size: 155KB - Virtual size: 155KB

.$dsdir
Size: 512B - Virtual size: 123B

.icar
Size: 1KB - Virtual size: 1KB

.ecar
Size: 512B - Virtual size: 84B

.ally
Size: 1024B - Virtual size: 518B

.carry
Size: 1024B - Virtual size: 576B

.data
Size: 2KB - Virtual size: 1KB

.ram
Size: - Virtual size: 98KB