JaffaCakes118_9b00d0f2ceec73fe676e4e46c83c80e9 | Triage

Sharing

General

Target

JaffaCakes118_9b00d0f2ceec73fe676e4e46c83c80e9
Size

279KB
MD5

9b00d0f2ceec73fe676e4e46c83c80e9
SHA1

2cf277cea2d22bc981a5275ec1e0431d1f89dbb9
SHA256

2668f2afb8cfdb2198670b2c91b52470548f86748673e94f73613fceb8bf8022
SHA512

17baac1f824313afb63e7db6e364029d4f2a41502894cee28f27848dca1b1d13fb9f393f3fa3c18dd577e1650d4cba1bd0ede4be32ce42314f4662750824befa
SSDEEP

6144:kn5jzAWmB/lkHai8y38jfM9kTZnXqbvOvbGOWhGGtebfKphGS7S2s1gBdl:kn5j8Ww/ly36v9n6bvVOWhG1eph+9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_9b00d0f2ceec73fe676e4e46c83c80e9

Files

JaffaCakes118_9b00d0f2ceec73fe676e4e46c83c80e9
.exe windows:4 windows x86 arch:x86

64b74622fcc5af1bd01c654243701d2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
WriteFile
HeapAlloc
SetFilePointer
ExitProcess
VirtualQuery
GetOEMCP
GetSystemInfo
EnumResourceNamesW
VirtualProtect
SetEndOfFile
GetStringTypeExW
GetCurrentProcess
ReadFile
FlushFileBuffers
HeapFree
RtlUnwind
FindAtomW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comdlg32

ChooseFontA
GetOpenFileNameA

ole32

CoTaskMemFree
CLSIDFromString
CoCreateInstance
StgCreateDocfile

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 147KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ