39d6411da21c03240d5a3036a9653b7d_JaffaCakes118 | Triage

Sharing

General

Target

39d6411da21c03240d5a3036a9653b7d_JaffaCakes118
Size

179KB
MD5

39d6411da21c03240d5a3036a9653b7d
SHA1

0b81b5e225c8502958cd582985959e795fecb5cd
SHA256

59cd62f8b9f776eb5a36f43bebdebb19e4864cba359c3476b60677fcc7653525
SHA512

365c11b53a4e51cdc47e1ea2640a8d5f3e8d9ca98d68c10cbb68d990a2fc3dfefad0d211bba2bf2399a99bbe45d7c906f37d820c3e2b11ec5c6435aadd6dc657
SSDEEP

3072:PsKCHMTYp2hUlDJaHBqObirBcmJ4g/aLB0wZj+/NgUld60WFjKmO2:Pz2MT1KuHBqeeBHN/CRR+/NXWF2t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39d6411da21c03240d5a3036a9653b7d_JaffaCakes118

Files

39d6411da21c03240d5a3036a9653b7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8ed435ecff03013b3c3ef0c6e09f63b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
GetCurrentProcessId
FindFirstFileA
GetModuleHandleA
SetFilePointer
ReadFile
QueryPerformanceCounter
WideCharToMultiByte
EnumResourceLanguagesW
FindNextFileA
EnumResourceTypesA
GlobalHandle
GetSystemDirectoryW
lstrlenA
IsDBCSLeadByte
WriteFile
GetCurrentThreadId
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ