a330e10952f54b6f926cfc761030f750_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a330e10952f54b6f926cfc761030f750_JaffaCakes118
Size

280KB
MD5

a330e10952f54b6f926cfc761030f750
SHA1

002d6fb072be5b7101b65b12dbd0a0dab6d7f5e4
SHA256

6d6b0594b391784c6e5678aa9ba268ee9ed732d7a2c995535cbd5b3c426630d0
SHA512

2945dfa3bd769b44bde18ac06cb1698cc648e21a5bf81adfcaa87715b44951e20af00f03963eebcb7348ddbde488a7e218cd6438d8332c87d6331e7c624365dc
SSDEEP

6144:n4mP0wifwZbzoZSrmIWdk8u8NGcCLsPvD3mq5N0E1R:vP0yb/aIW299c2sPbm8N0ET

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a330e10952f54b6f926cfc761030f750_JaffaCakes118

Files

a330e10952f54b6f926cfc761030f750_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5913af8a7d66fb6ddc608f5f9c9ac5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

ole32

CoCreateInstance
CoTaskMemFree
CLSIDFromString
StgCreateDocfile

kernel32

VirtualProtect
VirtualQuery
GlobalAddAtomA
ReadFile
FlushFileBuffers
HeapFree
WriteFile
GetSystemInfo
GetOEMCP
RtlUnwind
EnumResourceNamesW
ExitProcess
GetVolumeInformationA
SetEndOfFile
HeapAlloc
GetCurrentProcess
SetFilePointer
FindAtomW

comdlg32

ChooseFontA
GetOpenFileNameA

Sections

.text
Size: 148KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ