f31e507b03b7098a37e5434c70ce4c77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f31e507b03b7098a37e5434c70ce4c77_JaffaCakes118
Size

168KB
MD5

f31e507b03b7098a37e5434c70ce4c77
SHA1

3520cc212d777c049fe6c8427797d0fb43d48edb
SHA256

103e2262bf4255d28e4e0e3e9c2a7b1010911331b919f39f8ff0be49358bc90b
SHA512

fa7167566fb1d80dc743bf713bce451adfaa62f6ad6ebec0ec7698bceea13ef87d938636fcc32ed14eb394da5aac748bb4fc0d85b8a370462c5d61b15154c438
SSDEEP

3072:VqpsM21UvCeQNboj1MlF7k/xIpplfZHQV4FdhWY/QW4LaEPkqCOKvI:VqpsM2OvCeQ5OelFoKXA2OYYWTEjCOgI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f31e507b03b7098a37e5434c70ce4c77_JaffaCakes118

Files

f31e507b03b7098a37e5434c70ce4c77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

385286abf1114c7254751acfc6f33371

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateProcessA
CloseHandle
GetStartupInfoA
DeleteFileA
GetTickCount
GetProfileStringW
GetLastError
OpenMutexA
GetHandleInformation
SetHandleInformation
CreatePipe

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

ws2_32

WSASocketA
WSAWaitForMultipleEvents
WSAAddressToStringA
WSAConnect
WSACloseEvent
WSAGetOverlappedResult
WSACreateEvent

version

GetFileVersionInfoA
GetFileVersionInfoSizeA

msvcrt

__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_onexit
__p___initenv
exit
_XcptFilter
memset
free
malloc
strstr
clock
_exit

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ