457ff2f8bd8433c448fc77d93779a074_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

457ff2f8bd8433c448fc77d93779a074_JaffaCakes118
Size

180KB
MD5

457ff2f8bd8433c448fc77d93779a074
SHA1

8082114d958c298c9330048ac857ae5665b466d4
SHA256

65d5ef34d0a9b3478a667fe06c5d6c3a3bd4b99d8f3a146d86a9286f81b3ef37
SHA512

94fb451546e5cfcc01665c42cac5ea4aaf618646fb7738fe58d12abe5930e41520a045f21e58a1ee24beed0cd959fe0139c4bcbf1d4eb1dee718f0effaf92e80
SSDEEP

3072:WvQSUaM2yhwkpjWsNCw3od6qjunNMmpRaxXP/pilPS/SpZp2kNLIyTBRCF1T:pukpSYUgqCepiA/SpZXLIgUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
457ff2f8bd8433c448fc77d93779a074_JaffaCakes118

Files

457ff2f8bd8433c448fc77d93779a074_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de7e1f1d69669ad004d18ba263624b85

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
BaseFlushAppcompatCache
InterlockedExchange
TlsAlloc
VirtualFree
GetACP
VirtualQuery
GetSystemTimeAsFileTime
EnumResourceTypesA
HeapDestroy
SetEndOfFile
VirtualAlloc
HeapCreate
CreateMailslotW
SetLastError
GetSystemInfo
TlsFree
GetLocaleInfoA

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ