f3e23b6b634b55f910f539abdf420e18_JaffaCakes118 | Triage

Sharing

General

Target

f3e23b6b634b55f910f539abdf420e18_JaffaCakes118
Size

165KB
MD5

f3e23b6b634b55f910f539abdf420e18
SHA1

1dd394d0891dbc312461e95e9868acc71c323f51
SHA256

c2a2815c3e91975d524eab022dcac4f62b0149150c8c0c8cb0dbde7140dca622
SHA512

97785facc60a341de9db3968cbe042c5583d472035b0b39c4819962875ba80873e6aaafeb96636a22af4e276ed1976830a2185a1a514cd64cfcc0963522d67f0
SSDEEP

3072:eqkoO5TNvZrUnCriPcdRWHsTmt3fG2p+GQGvoy0JN75PyQQgvZy:eqZWTNZrCJPcd4HsTPh75aF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3e23b6b634b55f910f539abdf420e18_JaffaCakes118

Files

f3e23b6b634b55f910f539abdf420e18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

634436c324ad8ea91930c51080415bd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetAtomNameA
GlobalSize
LoadResource
MultiByteToWideChar
WritePrivateProfileStringW
GetVersionExW
GetModuleHandleW
FindClose
lstrlenW
DeleteCriticalSection
FindFirstFileW
EnumResourceTypesW
LockResource
GetTickCount
MulDiv
GetPrivateProfileIntW
GetVersionExA
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
InitializeCriticalSection
Sleep
GetPrivateProfileStringW
GetLocaleInfoW

newdev

UpdateDriverForPlugAndPlayDevicesW

oleacc

LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ