ec5844741fbbcc2e0d60bced8dc10898_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec5844741fbbcc2e0d60bced8dc10898_JaffaCakes118
Size

164KB
MD5

ec5844741fbbcc2e0d60bced8dc10898
SHA1

57886ac1f1cc5633ed2df25a0f0a3e11dcac1775
SHA256

7d04e71f17fb7d4a43e4505361ac9c955ed76d6a4de21c3ca15cb3187c1197e3
SHA512

bc76d3cf4ac57e870b91958d8ae10e223652377c78c28c216563646a07c0651ae18aa0a8bdda90a9c42e9b9a6bd22efe1c22dd52b25f6985dc582536dfba2fd2
SSDEEP

3072:el4Szn2BUUYdf4jlcwMBR8jEcweCt7qvsn0nRjV+dneD:XSzKUUqoiv4EXeS7qvs0RwleD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec5844741fbbcc2e0d60bced8dc10898_JaffaCakes118

Files

ec5844741fbbcc2e0d60bced8dc10898_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bbc655d267db9cecde049daaaf05cbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
GlobalGetAtomNameW
FindNextFileA
WriteFile
lstrlenA
GetCurrentThreadId
WideCharToMultiByte
GetModuleHandleA
EnumResourceTypesA
EnumResourceLanguagesW
SetFilePointer
GetCurrentProcessId
GetSystemDirectoryW
QueryPerformanceCounter
IsDBCSLeadByte
FindFirstFileA
ReadFile
FindClose

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ