fff8da65f5e9cd7caa1708fdd8c3e82f_JaffaCakes118 | Triage

Sharing

General

Target

fff8da65f5e9cd7caa1708fdd8c3e82f_JaffaCakes118
Size

280KB
MD5

fff8da65f5e9cd7caa1708fdd8c3e82f
SHA1

51f414d2ceb40c087b9ab3a06a820278523f718f
SHA256

864dbc9fd3d94f589cf34d7c8d5b5b5c330b678575d422451bca49f265a098fd
SHA512

ebbfc7b519d340130b629e1ac338d3976be18992cf36b88f47312f0a21a313cc9a965febc36a962d1845f0e0b9eeedf143cfa330ce6eec90ad6aa785eda10b4b
SSDEEP

6144:FHvijHiEwlU+3QEHUpDpEK18gYx11v7cS9gqvW/f9+of:FPXEOU+fUpyKag49g6sf9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fff8da65f5e9cd7caa1708fdd8c3e82f_JaffaCakes118

Files

fff8da65f5e9cd7caa1708fdd8c3e82f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8810f503bfa851d519080ed0999bb9b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseFontA
GetOpenFileNameA

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

ole32

CoCreateInstance
CLSIDFromString
CoTaskMemFree
StgCreateDocfile

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

GlobalAddAtomA
GetACP
SetEndOfFile
TlsAlloc
HeapAlloc
InterlockedExchange
SetLastError
EnumResourceNamesA
HeapFree
ReadFileScatter
TlsFree
GetSystemInfo
ExitProcess
GetLocaleInfoA

Sections

.text
Size: 149KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ