63e5a26323625fbfb26098998a67f670_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63e5a26323625fbfb26098998a67f670_JaffaCakes118
Size

164KB
MD5

63e5a26323625fbfb26098998a67f670
SHA1

79305b68bb9d2e1f93e77f607b026fe359ed7379
SHA256

6a154cb829d819a011ce35a86ce16a295e9c4fc137c071907923e8aeebb62ffc
SHA512

ebac80ed5a414ecfe8b30190d7cd5b34b86284556e70505765d856155df086ca6c9843979bdd4875f327e2dd0df75bcbdcf8f66ce3d02143a46dc09ace684ee2
SSDEEP

3072:3SLvu3p5LWq92JXaRS+gcAAPzRqtLotMzD415bhmpgHqjXiXPLjdK8c3QmfmQxhh:gWziq9zg0zI6V1y6qjwPLj0FfmQxhY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63e5a26323625fbfb26098998a67f670_JaffaCakes118

Files

63e5a26323625fbfb26098998a67f670_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eaa2a2215b30c46372de130d4d376fe7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddLocalAlternateComputerNameA
EnumResourceLanguagesW
GetModuleHandleA
GetCurrentThreadId
ReadFile
WideCharToMultiByte
FindFirstFileA
lstrlenA
EnumResourceTypesW
FindNextFileA
SetFilePointer
GlobalHandle
WriteFile
CreateMailslotA
IsDBCSLeadByte
QueryPerformanceCounter
GetCurrentProcessId
FindClose

oleacc

AccessibleChildren
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ