89fe40b4fd23daa6526c66fcf770e5f9_JaffaCakes118 | Triage

Sharing

General

Target

89fe40b4fd23daa6526c66fcf770e5f9_JaffaCakes118
Size

1.7MB
MD5

89fe40b4fd23daa6526c66fcf770e5f9
SHA1

9605f32f6d10614c3e18af69de56fba589856659
SHA256

cad8a8e74f9cd8789ae53768b8e096e391d044b1139fa00edad3b9bb0177a72c
SHA512

408c5a637a412ac5051ae55436515256d91b4df7b0505826decdee0b09765749373ffeb23e2be7625eaa323c993cb1441ebdf5d9939723f6af9d9a4d1e7b5fac
SSDEEP

24576:0eyQrJzm7xi8VMFvxFXHJWWGvvVaQjNxhulsVjFk49w4aKBzPivftS77u5J:Ddqg8OFvxF3gWQNa4TMs1A4Ym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89fe40b4fd23daa6526c66fcf770e5f9_JaffaCakes118

Files

89fe40b4fd23daa6526c66fcf770e5f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abaa9a5bfff8694215bc0c6840022d0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFindExtensionA
PathFindFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

gdiplus

GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipGetImageWidth

kernel32

RtlUnwind
GlobalAddAtomW
GetCurrentProcess
FlushFileBuffers
SetEndOfFile
GetOEMCP
HeapFree
GetSystemInfo
VirtualProtect
EnumResourceNamesW
WriteFile
GetStringTypeExW
HeapAlloc
VirtualQuery
SetFilePointer
ExitProcess
ReadFile
FindAtomA

oleacc

CreateStdAccessibleObject
LresultFromObject

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 884KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 847KB - Virtual size: 847KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ