JaffaCakes118_0e0ac0f1e5b392d635d34bc3369ee155 | Triage

Sharing

General

Target

JaffaCakes118_0e0ac0f1e5b392d635d34bc3369ee155
Size

185KB
MD5

0e0ac0f1e5b392d635d34bc3369ee155
SHA1

70ce8250d0da2bfa5a0ca44d54083269256434ba
SHA256

4cc039adfbacf1c0a30b8f6a5d08ad372c187d7a836455197b2c5870e3e4b0ae
SHA512

9463f39e904800de50eaa2f86f29ed580209ed589cea0fe61a3fa896b64b51d9238ddf46ceaa94686aa0f938bb59df81079cde999517c5700b2a89ec0bbb4756
SSDEEP

3072:I1HoHq842/wG+HZHV5VQ217AP04by0aF3FRnXk3fjf6pitrFar:I1Mzwx5tQ217Az+RFV9X6bwizU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_0e0ac0f1e5b392d635d34bc3369ee155

Files

JaffaCakes118_0e0ac0f1e5b392d635d34bc3369ee155
.exe windows:4 windows x86 arch:x86

0b0d901980c8f863073130f7c1d19f28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemFree
CoCreateInstance
CLSIDFromString
StgCreateDocfile

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

comdlg32

ChooseFontA
GetOpenFileNameA

kernel32

GlobalAddAtomA
GetCurrentProcess
FlushFileBuffers
HeapFree
ReadFile
WriteFile
HeapAlloc
GetOEMCP
SetEndOfFile
VirtualQuery
EnumResourceNamesW
VirtualProtect
GetVolumeInformationA
ExitProcess
RtlUnwind
SetFilePointer
GetSystemInfo
FindAtomW

Sections

.text
Size: 96KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ