21fc20867c121e0d8235f1b7246c60d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21fc20867c121e0d8235f1b7246c60d0_JaffaCakes118
Size

167KB
MD5

21fc20867c121e0d8235f1b7246c60d0
SHA1

7f9fe2fdb0c3e85e877d8cc955527075e280879d
SHA256

d7b66c0ee5aeb8bb5c5ee26d1cddf009e438bb7ff8da0a4994779b1d808008ff
SHA512

becf761ee651be3a29bf6d72723d54eaa933612326a5f932b006b1f5f10624d759433b8f95bdc590d6286380146ef21b66ca51c6d8980ffc5414bce50cb11bcb
SSDEEP

3072:VqpsM21UvCeQNboj1MlF7k/xIpplfZHQV4FdhWY/QW4LaEPkqCOKv6:VqpsM2OvCeQ5OelFoKXA2OYYWTEjCOg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21fc20867c121e0d8235f1b7246c60d0_JaffaCakes118

Files

21fc20867c121e0d8235f1b7246c60d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

385286abf1114c7254751acfc6f33371

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateProcessA
CloseHandle
GetStartupInfoA
DeleteFileA
GetTickCount
GetProfileStringW
GetLastError
OpenMutexA
GetHandleInformation
SetHandleInformation
CreatePipe

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

ws2_32

WSASocketA
WSAWaitForMultipleEvents
WSAAddressToStringA
WSAConnect
WSACloseEvent
WSAGetOverlappedResult
WSACreateEvent

version

GetFileVersionInfoA
GetFileVersionInfoSizeA

msvcrt

__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_onexit
__p___initenv
exit
_XcptFilter
memset
free
malloc
strstr
clock
_exit

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ