140336a15f5b01cd9f0cd6cad58a7d7c_JaffaCakes118 | Triage

Sharing

General

Target

140336a15f5b01cd9f0cd6cad58a7d7c_JaffaCakes118
Size

171KB
MD5

140336a15f5b01cd9f0cd6cad58a7d7c
SHA1

a162b9b6a954d499a92d30b5d36109b5d0e3271b
SHA256

cf427b404ea7ef591cc67ee07140fa092d787e405803deae03e290f241a6858f
SHA512

c1b021a5222011646f8ba8ea9fb6f8ad85e137472f536fdd22527b62f0c6756fe5bc8a362589d0a6f51e6bc9b3933bb87dc71bda7985b6c9ad8f9d0fe8aa176e
SSDEEP

3072:/9ocr+PgxoG7R/T4Js8o1xlPU6GYYdNeYT/vYRwxR7QCBZwPPB9RfRn/FDyJ6:/VyGvt20vl6YYdNeWYRwzEXPpjGJ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
140336a15f5b01cd9f0cd6cad58a7d7c_JaffaCakes118

Files

140336a15f5b01cd9f0cd6cad58a7d7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19048ba8c514b1205a07c4a48eb505c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyA
lstrcpynW
GlobalAlloc
OutputDebugStringW
lstrlenW
LockResource
CheckRemoteDebuggerPresent
lstrcpyW
EnumResourceTypesW
GlobalFree
GetCPInfo
FindClose
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
GetTickCount
DeleteCriticalSection
GetACP
lstrcmpiW
GetLastError
GetModuleHandleW

user32

PostThreadMessageW
SetTimer
GetMessageW
TranslateMessage
CharUpperW
wsprintfW
GetAncestor
CharNextW
GetDC
KillTimer
DispatchMessageW
UnregisterClassA

winspool.drv

DocumentPropertiesW

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ