24a75a13d1f4d0bd02f7ba5d27254c68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24a75a13d1f4d0bd02f7ba5d27254c68_JaffaCakes118
Size

300KB
MD5

24a75a13d1f4d0bd02f7ba5d27254c68
SHA1

2b9fe43df4ecbe9f6789d3b0c72c58b620d2e4ea
SHA256

84a606a27508c6f6168ba293ce904b7e659273da861e46d5367b6b891e6d2773
SHA512

332e942fe5821b22882145f1992ec54e19223e00d6d123cedaa5b71a1aba2a56b0353ed970673ab5c4c4461f62feac7a8333e796e616bbe96b79ea07a408cd2a
SSDEEP

6144:HFRxuMVmaMTKLfiHCczjFUAr2jVSrHgYu1mWP2/YlmMnIPuoW:jVZMTKLfvczjC22V9xPYQ2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24a75a13d1f4d0bd02f7ba5d27254c68_JaffaCakes118

Files

24a75a13d1f4d0bd02f7ba5d27254c68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84354365a3a15fd25b2ddba389fa0835

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetVersion
GetModuleHandleA
GetStartupInfoA
GetDiskFreeSpaceA
GetVersionExA
GetTempPathA

user32

RemoveMenu
CloseWindow

winspool.drv

ReadPrinter

advapi32

RegOpenKeyA

shell32

SHGetSettings

msvcrt

__setusermatherr
_controlfp
_exit
_except_handler3
exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE