9408b6cd8ac1e4e6208e4ee07bf79736_JaffaCakes118 | Triage

Sharing

General

Target

9408b6cd8ac1e4e6208e4ee07bf79736_JaffaCakes118
Size

277KB
MD5

9408b6cd8ac1e4e6208e4ee07bf79736
SHA1

b45dc0d049d71e802b69e66fd851f96029b15d8b
SHA256

e8a5ae606ef639d020de48c954f3d43ff463a6e045d05a331ebc1a5088aada1b
SHA512

243848be4aa9a29f1cc52aa51c6a172b50225f352f012bea58f0ad4f126c719a2589f322aef881343fe694801738922f9f34af9fc97b17aa45ec177b8801e298
SSDEEP

6144:W8+/V1fTvXcO217yj61Pxijls3NM+mFSyu9ezbypHv4+Rv6SFo7jVvvw:B+/V1fTfcv5yQPxij+aFSFevcHjRQNw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9408b6cd8ac1e4e6208e4ee07bf79736_JaffaCakes118

Files

9408b6cd8ac1e4e6208e4ee07bf79736_JaffaCakes118
.exe windows:4 windows x86 arch:x86

baabd7e925d30f0343a3a2666f5b7391

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
GlobalAddAtomA
ExitProcess
SetLastError
InterlockedExchange
HeapFree
GetSystemInfo
EnumResourceNamesA
TlsFree
ReadFileScatter
GetACP
HeapAlloc
TlsAlloc
GetLocaleInfoA

ole32

CoCreateInstance
CLSIDFromString
CoTaskMemFree
StgCreateDocfile

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

comdlg32

ChooseFontA
GetOpenFileNameA

Sections

.text
Size: 138KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ