c23e0a035a2edca35c1993b4c97d1c9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c23e0a035a2edca35c1993b4c97d1c9f_JaffaCakes118
Size

184KB
MD5

c23e0a035a2edca35c1993b4c97d1c9f
SHA1

ee283e395be756c4507dc24cb8e58b9b83b82c52
SHA256

1704f9058901c989dd27923043629c818d09ffebe6e72fc1ad6f3e23b530fb1d
SHA512

2201caa28469e55313b1a09bd3a7cd0a64cdd29a67308ea08ae45bced9cc951ee01cc55cdb63f422c0a5b27f55aeba2318f08c18b11adf4b382113a8d5d2d510
SSDEEP

3072:5MPClBMatq5k6nRniCS0F0HlMVAsB+nymEZZFxs76JRM72Zth95Qhquh5:GPeMan9C7F0HlCB+y14sMcVQX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c23e0a035a2edca35c1993b4c97d1c9f_JaffaCakes118

Files

c23e0a035a2edca35c1993b4c97d1c9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

734fb1e4c1214b0c15cd51f7a661dd05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
FindClose
GetStartupInfoA
InterlockedExchange
GetTickCount
SetUnhandledExceptionFilter
Sleep
EnumResourceNamesW
LoadLibraryExW
RtlUnwind
InterlockedCompareExchange
FreeLibrary
GetLongPathNameA
QueryPerformanceCounter
ExitProcess
GetProcAddress

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comdlg32

ChooseFontA
GetOpenFileNameA

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

ole32

CoCreateInstance
CLSIDFromString
CoTaskMemFree
StgCreateDocfile

Sections

.text
Size: 94KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ