2dcd665f5f4798ed9c3369bfe8307297_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dcd665f5f4798ed9c3369bfe8307297_JaffaCakes118
Size

142KB
MD5

2dcd665f5f4798ed9c3369bfe8307297
SHA1

d0f655199326525594519ec9513041c3b56236a2
SHA256

1d42b18600a364027f9576a6bd367ae48bba7390e633787a8cefe2551c081e11
SHA512

b0e7d6a144b2a04a0b322d511c59157f5e807f2b1de36466595bd1ab3d02595de026ccd14aed9bbcb4044bc57655ce061dbf3be7338e3ae9f22db6fc41eb486c
SSDEEP

3072:PE/PIMX/jlBz7UazF91dERDn4QMAaDbYE4FZLlkU+H85jTo:qAmr7z4ORkEofWH+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dcd665f5f4798ed9c3369bfe8307297_JaffaCakes118

Files

2dcd665f5f4798ed9c3369bfe8307297_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2089063935b8d7dc6ba7cd708bd44f0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

TerminateThread
LCMapStringA
CreateIoCompletionPort
HeapSize
RaiseException
GetStringTypeA
EnumResourceNamesW
GetStringTypeW
GetConsoleMode
ExitProcess
GetLocaleInfoA
GetConsoleCP

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ