b644e8d150dbaa803b6b201b89c8cd0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b644e8d150dbaa803b6b201b89c8cd0c_JaffaCakes118
Size

273KB
MD5

b644e8d150dbaa803b6b201b89c8cd0c
SHA1

18f118fc6b7683739bd45310d3599270152eb812
SHA256

1a0f280e9f5279203492f59ab0b203f2f2f75b924290dca3a04f93903343847f
SHA512

d7dfdb89c4050ab737aa636b098a8a3fc95d58aad9c3251a007511a2712a47c1f3171a5c374a3a309c4f8e885432f743c9fcc840d79b91e77d49b559f2a15fc4
SSDEEP

6144:7c/FXhmn9hxRMFZi+Mb4Pt4lzckvHU0fkaDIhXkwwbp9XOp5NoIi5gyE:8m9hxRMF145NlkF0/p9+pXoc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b644e8d150dbaa803b6b201b89c8cd0c_JaffaCakes118

Files

b644e8d150dbaa803b6b201b89c8cd0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

249d6f8dd2a605ef2dcab0b0b2c7a462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesW
GlobalGetAtomNameW
ReadFile
GetCurrentThreadId
IsDBCSLeadByte
QueryPerformanceCounter
GetModuleHandleA
lstrlenA
WriteFile
GlobalHandle
EnumResourceTypesA
WideCharToMultiByte
FindNextFileA
GetSystemDirectoryW
FindFirstFileA
SetFilePointer
GetCurrentProcessId
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesW

oleacc

LresultFromObject
CreateStdAccessibleProxyW

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ