b3f07f5f9dbdb4c098ffe4a433be6207_JaffaCakes118 | Triage

Sharing

General

Target

b3f07f5f9dbdb4c098ffe4a433be6207_JaffaCakes118
Size

170KB
MD5

b3f07f5f9dbdb4c098ffe4a433be6207
SHA1

7264304465fcdfa160300c0063374247e30aab7b
SHA256

16622cc2b639a14f7dfa114bf4ccc67b691c7f0ced4f6e0750d59c0d931be9cc
SHA512

b16227f17eb47e69578f8011c041e610c03c03fd8ba02b1fc4c74fb69700b2a7809d2f233bfe6301f2de50105043af65a275a43009ff12514a583b201ccb59c7
SSDEEP

3072:zmcj+WH6J4mqjAQaroWSr0+01tRMI3Y+LNyS+wchDE7wWWaYDRSp7Ob9Lr:7ZtmqjAQF0drRNbNd+dDEZcDRSVOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3f07f5f9dbdb4c098ffe4a433be6207_JaffaCakes118

Files

b3f07f5f9dbdb4c098ffe4a433be6207_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3130be1a6f1a147c36f97e0d542b8403

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

ole32

CLSIDFromString
CoTaskMemFree
CoCreateInstance
StgCreateDocfile

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

kernel32

GlobalAddAtomA
SetFilePointer
WriteFile
VirtualProtect
GetSystemInfo
VirtualQuery
ExitProcess
HeapAlloc
FlushFileBuffers
EnumResourceNamesW
SetEndOfFile
RtlUnwind
ReadFile
GetVolumeInformationW
HeapFree
GetCurrentProcess
GetOEMCP
FindAtomW

comdlg32

ChooseFontA
GetOpenFileNameA

Sections

.text
Size: 90KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ