3697f33f2e0227afa5d4052d806f910b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3697f33f2e0227afa5d4052d806f910b_JaffaCakes118
Size

279KB
MD5

3697f33f2e0227afa5d4052d806f910b
SHA1

078114606b135f788c7dad905e1ed2932ee43850
SHA256

2a2d2d6b07e6071ce583375ae580b36cfdb8781aede6540b587a480c578fa4b2
SHA512

b4b3b22d487f9c60582add10884e71741603dcb337201f265e18aa398e54330829161b2e9175e3bf3a92986acc24397ae0be76a5d32860ac4e38d46ffca816f3
SSDEEP

6144:ZBh4HH2NI8m3kA+p0c9JD0C10jsKq54/ho4LCgJpSiWUQM/tX:2n2NI8m3xjc9JP1lSho4pJ7QM1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3697f33f2e0227afa5d4052d806f910b_JaffaCakes118

Files

3697f33f2e0227afa5d4052d806f910b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ad7e74c3de98041aa10216eb0c7966d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

ole32

CoCreateInstance
CoTaskMemFree
CLSIDFromString
StgCreateDocfile

kernel32

GlobalAddAtomA
LoadLibraryExW
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
FreeLibrary
FindClose
GetCurrentThreadId
GetStartupInfoA
EnumResourceNamesW
GetLongPathNameA
RtlUnwind
ExitProcess
InterlockedExchange
Sleep
GetProcAddress

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

ChooseFontA
GetOpenFileNameA

Sections

.text
Size: 146KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ