08989f7d15062c05cd7e9e47869ae522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08989f7d15062c05cd7e9e47869ae522_JaffaCakes118
Size

165KB
MD5

08989f7d15062c05cd7e9e47869ae522
SHA1

bd0484548495dc9cbbc041c8bc4d546f09ff1d6a
SHA256

c97ef5d15f106e0c27c00566621a23ee34a3c7e468260f96269ee308069355f4
SHA512

70182bc1617e28743714cbbfb28242f9c4ba6d5f721f17a807ce1604ca99abb70ffa22d3799e82650dd306bf88f970042a51eb5d346779b0576617fb40d12894
SSDEEP

3072:rObu58/Eldu0Ae9iJQ3EwENPHmRF6peMvPNRCLdHw86ah4eQjA:kUu0+wEs64ENRChrdlMA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08989f7d15062c05cd7e9e47869ae522_JaffaCakes118

Files

08989f7d15062c05cd7e9e47869ae522_JaffaCakes118
.exe windows:4 windows x86 arch:x86

836ebb1bef0e988dfbb5698d0d23b476

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
GlobalHandle
FindFirstFileA
GetCurrentThreadId
SetFilePointer
GetCurrentProcessId
lstrlenA
EnumResourceLanguagesW
EnumResourceTypesA
WriteFile
WideCharToMultiByte
ReadFile
QueryPerformanceCounter
GetSystemDirectoryW
GetModuleHandleA
IsDBCSLeadByte
FindNextFileA
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

LresultFromObject
CreateStdAccessibleProxyA

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ