2f28a72d9260725742dc8dba7c89055d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f28a72d9260725742dc8dba7c89055d_JaffaCakes118
Size

116KB
MD5

2f28a72d9260725742dc8dba7c89055d
SHA1

55ea0b006f9927c0af1f5b92eb07dc6531d9608e
SHA256

41a53c391d540d9dcfa8f92e877ed4ee0bd03abd8c8185bc7ec0499bcd613783
SHA512

a6f36d5e5bc1d568a734f624cf10c16014178079326e659a1f5870d1eb14889de98ce01c50c2d955a5fb26261e5513e94691ff5f21fd7bce3302329a9c4fdbbb
SSDEEP

3072:7aLWbK6/HQ4jQ+zDaV6pqtonEMNJD85ga:W6BpcrGeohzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f28a72d9260725742dc8dba7c89055d_JaffaCakes118

Files

2f28a72d9260725742dc8dba7c89055d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5358641268e0ee38fd4684573a996543

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

TerminateThread
GetConsoleMode
CreateIoCompletionPort
GetLocaleInfoA
HeapSize
GetStringTypeA
EnumResourceNamesW
GetStringTypeW
ExitProcess
LCMapStringA
RaiseException
GetConsoleCP

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ