93a7a0f783c262151926c940ff9f8293_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93a7a0f783c262151926c940ff9f8293_JaffaCakes118
Size

279KB
MD5

93a7a0f783c262151926c940ff9f8293
SHA1

ef602dff780c03e11a6a4aec21ddd6f9971f68f4
SHA256

f5be6a94cdac0fc766db0c53c7c58f8dcef3204c03dec2bc198ccbfee5593f03
SHA512

49c62676652becdd8876732ee8beaeb8f060db211654565f3f521302228ad39e943d1718a610e4499bc0148aa8ed2ff16c05d8042de8008616189fdd802288ab
SSDEEP

6144:5sMiFn0x2Gbtm/Q6s/cDYmHsNPYJvJnKFa6tGYCcVZX:T0/u/rNPYnKFaKDZVZX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93a7a0f783c262151926c940ff9f8293_JaffaCakes118

Files

93a7a0f783c262151926c940ff9f8293_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee2d7deea804f534157d96d56a83d343

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipGetImageWidth

oleacc

CreateStdAccessibleObject
LresultFromObject

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shlwapi

PathFindExtensionA
PathFindFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

kernel32

VirtualProtect
GetCurrentProcess
GlobalAddAtomW
WriteFile
HeapFree
GetOEMCP
SetEndOfFile
RtlUnwind
ReadFile
HeapAlloc
EnumResourceNamesW
VirtualQuery
GetStringTypeExW
SetFilePointer
ExitProcess
FlushFileBuffers
GetSystemInfo
FindAtomA

Sections

.text
Size: 148KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ