f5c3fcb29e546f510763ca76c6eb0b96_JaffaCakes118 | Triage

Sharing

General

Target

f5c3fcb29e546f510763ca76c6eb0b96_JaffaCakes118
Size

280KB
MD5

f5c3fcb29e546f510763ca76c6eb0b96
SHA1

cf36deac27d75cead4cafb440eb7b33d7932713c
SHA256

0cb65eb1a89715f3051d72b308ff94679351d8101063674eb5e689eff8ad359e
SHA512

c11371d33541c9652255596050e21bf322e41a15a0fd2df3a733a171af7f77b8bc31939fcd64ac193d01ecefb8b72becfbbfd36075bbd663cc1ccf62a0dcf4d9
SSDEEP

6144:FHviaHiEwlU+3QEHUpDpEK18gYx11v7cS9gqvW/f9+of:FPcEOU+fUpyKag49g6sf9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c3fcb29e546f510763ca76c6eb0b96_JaffaCakes118

Files

f5c3fcb29e546f510763ca76c6eb0b96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8810f503bfa851d519080ed0999bb9b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseFontA
GetOpenFileNameA

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

ole32

CoCreateInstance
CLSIDFromString
CoTaskMemFree
StgCreateDocfile

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

GlobalAddAtomA
GetACP
SetEndOfFile
TlsAlloc
HeapAlloc
InterlockedExchange
SetLastError
EnumResourceNamesA
HeapFree
ReadFileScatter
TlsFree
GetSystemInfo
ExitProcess
GetLocaleInfoA

Sections

.text
Size: 149KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ