964130388bd4c8ff0bc56a1230a842c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

964130388bd4c8ff0bc56a1230a842c6_JaffaCakes118
Size

178KB
MD5

964130388bd4c8ff0bc56a1230a842c6
SHA1

8659e85bbd3ef0f7c720222671de41e126415c22
SHA256

ae7d1afb0166f3c50a97c6fb506556ac2fb2225b8bec47634ea71d3a60893759
SHA512

f8638c42fe70f783d5b38c6e4561ced718ad07f3f1a72068ac19820820971d49402b441f15bc18cbdd00d373743105bc0ea67d99fb4d12d44cb349951da7df1f
SSDEEP

3072:VYTHQpLdAMcoRFBr3ONPMmJvXl47/cHO1ok6PmjYJu3GZHQR4NP6TCvc7cdGA5:VyHQbcQFB6hvXl4gHiamx3GVQS6T37c3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
964130388bd4c8ff0bc56a1230a842c6_JaffaCakes118

Files

964130388bd4c8ff0bc56a1230a842c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

786c36817b8e7d7241841f36047f8a11

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
ReadFile
IsDBCSLeadByte
FindNextFileA
EnumResourceLanguagesW
SetFilePointer
lstrlenA
WriteFile
EnumResourceTypesA
GlobalHandle
FindFirstFileA
CreateMailslotA
GetModuleHandleA
GetCurrentThreadId
WideCharToMultiByte
GetCurrentProcessId
QueryPerformanceCounter
FindClose

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ