87ed2acf3fd1e3cf5b7848b8564cf3e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ed2acf3fd1e3cf5b7848b8564cf3e3_JaffaCakes118
Size

184KB
MD5

87ed2acf3fd1e3cf5b7848b8564cf3e3
SHA1

8873d93c6c89e19a7b763f71555b5ced6ca9bc40
SHA256

d18a285ad3786b9003b58daac46883bda33cb5db3c8ea4d0a1f5cc104544136d
SHA512

9189de8a0203bda392a951579824632db90ed6ef7e8e987d27ca4268a370199fe75ecab4c43b097c3634eedb72fe43664cad00a03e6fe485422a6c5b6ca8fd46
SSDEEP

3072:pjSKeGDhyL4u/OGwAsis+1eBt39XSMc6f5GyPJB6ydu9B3oEwpN:pGKeO/u/oHZBjjPJZY9BiN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ed2acf3fd1e3cf5b7848b8564cf3e3_JaffaCakes118

Files

87ed2acf3fd1e3cf5b7848b8564cf3e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3a864d92cdf02dd2d8229cab914ea94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseFontA
GetOpenFileNameA

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GlobalAddAtomA
GetCurrentProcess
GetSystemInfo
VirtualQuery
SetFilePointer
VirtualProtect
SetEndOfFile
ExitProcess
RtlUnwind
HeapFree
EnumResourceNamesW
WriteFile
GetVolumeInformationA
FlushFileBuffers
HeapAlloc
ReadFile
GetOEMCP
FindAtomW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

ole32

CLSIDFromString
CoTaskMemFree
CoCreateInstance
StgCreateDocfile

Sections

.text
Size: 94KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ