JaffaCakes118_1c6c7561efaa9fecdd96222014c80ad4 | Triage

Sharing

General

Target

JaffaCakes118_1c6c7561efaa9fecdd96222014c80ad4
Size

186KB
MD5

1c6c7561efaa9fecdd96222014c80ad4
SHA1

45f19657e8333da6ebb61fe8f5639689cf3e8e92
SHA256

4cd8dac5fb8c4eea3eb5ece67bdbdb005b84185b368a57a59ebda0c0832c0d88
SHA512

dfbe5fa87c0e8e299b4040e8b33b0c73688836f1ad31153611adc7a14c233d910b45883a31b47a94becf5c0ad8ff629ef70f7488325764b9ad9bb290d49d24fd
SSDEEP

3072:JrNmuxndTuXB3zNX9I8AqL8En1mwYHFrDB05eDc0cDNgacixAPX8i7gQh/oVAR3G:Guxnd+BhXm8VrnQNFnB0hBgmOPf/ugf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1c6c7561efaa9fecdd96222014c80ad4

Files

JaffaCakes118_1c6c7561efaa9fecdd96222014c80ad4
.exe windows:4 windows x86 arch:x86

89d4bf38167cf3d94ba8b654a099cae0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

comdlg32

ChooseFontA
GetOpenFileNameA

ole32

CoCreateInstance
CoTaskMemFree
CLSIDFromString
StgCreateDocfile

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

FreeLibrary
GlobalAddAtomA
RtlUnwind
InterlockedCompareExchange
GetTickCount
FindClose
EnumResourceNamesW
SetUnhandledExceptionFilter
InterlockedExchange
QueryPerformanceCounter
GetStartupInfoA
LoadLibraryExW
GetLongPathNameA
Sleep
ExitProcess
GetProcAddress

Sections

.text
Size: 101KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ